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TAKING ANOTHER CRACK 
AT REAL-TIME LINUX 

MontaVista looks to gain speed 
with mutexes, threaded interrupts 



BY EDWARD J. CORREIA 

MontaVista Software Inc. is tak- 
ing another stab at real-time Lin- 
ux. The embedded Linux vendor 
in mid-October launched the 
Open Source Real-Time Linux 
Project, an effort to improve 
determinism of the operating 
system and expand its usefulness 
for mass-market communica- 
tions equipment requiring hard 
real-time performance. 

MontaVista in 2003 had two 
of its real-time extensions — a 
preemptable kernel and 0(1) 
scheduler — accepted into the 
main Linux 2.6 kernel tree. 



According to Jacob Lehrbaum, 
product manager for mobile and 
wireless at MontaVista, the new 
project uses the company's 
scheduler, but calls to replace 
the spinlock-based method of 
preempting the kernel with one 
that uses mutexes, or mutually 
exclusive objects, a function that 
allows multiple program threads 
to share the same resource, 
though not at the same time. 

Lehrbaum explained the dif- 
ference. "In a multiprocessor 
system, multiple applications are 
accessing the kernel simultane- 
► continued on page 22 



Sun: Merge 
EJB r J DO 
Data Mapping 



BY YVONNE L. LEE 

To bring together the divergent 
methods of data persistence in 
Java, Sun issued an open letter 
in late September proposing 
that persistence in the versions 
of Enterprise JavaBeans and 
Java Data Objects be merged 
into a single model called Plain 
Old Java Object (POJO). 

"In this meaning we're talk- 
ing about the mapping of Java 
objects that are in the program- 
mer's view that correspond to 
data in a database, to give the 
developers a simpler program- 
ming view," said Linda De- 
Michiel, specification lead for 
Enterprise Java Beans (EJB) 3.0. 



Persistence enables developers 
to work with data in an abstract 
way as it relates to a concept in a 
program, instead of referring to 
its actual location on a computer, 
DeMichiel said. Today, the EJB 
specification will persist objects 
only if they are within a contain- 
er on a J2EE-compliant applica- 
tion server while the JDO speci- 
fication can work with any 
object, explained Robert Green, 
chief solutions architect at Ver- 
sant Corp., which sells products 
supporting JDO. 

According to Green, Sun 
had sparked the ire of develop- 
ers at JavaOne last May when it 
► continued on page 21 



PLAIN OLD JAVA PERSISTENCE 



EJBs: Will persist objects only 
within a container running inside 
a J2EE application server. 
PROBLEM: An entity bean is 
not the same thing as a persis- 
tent object. 

JDO: Will work with any object. 
PROBLEM: It's complicated, 



and reguires manipulation of 

bytecode to make an object 

persistable. 

POJO: Brings together expert 

group members from EJB 3.0 

and JDO 2.0 to define a single 

persistence model for Java. 



Open Bar Open for Discussion 

Creates Internet resource for open-source legal issues 




Founder Jason Wacha wants to build the go-to site for licensing issues. 



BY EDWARD J. CORREIA 

It's not an open bar as in free 
drinks. Instead, the organizers 
of Open-bar.org, would prefer 
to be thought of as an open 
source for sober views and dis- 
cussions on the legal issues 
involving open-source software 
licensing, part of which is 
promised but not yet delivered. 
"There are plenty of re- 
sources out there for engineers 
with technical questions, but 
any discussions having to do 
with legal topics start out with 
'I am not a lawyer but...' 
► continued on page 20 
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IBM MAKES 
WAVES AS 
'ATLANTIC 
ROLLS IN 

BY JENNIFER DEJONG 

IBM Corp. unveiled the next 
version of its development plat- 
form last month, enhancing its 
Rational and other tools to work 
more easily with one another, 
and within the Eclipse 3.0 
framework. 

Promised for the end of this 
year, the IBM Software Devel- 
opment Platform, formerly 
code-named Atlantic, is built on 
Eclipse 3.0 and includes tools 
tailored to project managers, 
architects, developers, testers 
and operations managers — as 
well as executives who want to 
keep an eye on how business- 
critical development projects 
are proceeding. 

► continued on page 16 
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OAGIS, New UBL Seek to Aid E-Commerce 



BY YVONNE L. LEE 

Two separate groups have 
released specifications that 
have the goal of making it possi- 
ble for businesses in different 
industries to exchange com- 
monly used documents such as 
invoices and purchase orders. 

On Nov. 1, the Organization 
for the Advanced of Structured 
Information Standards (OASIS) 
plans to release its library of 
XML forms for the first version 
of its specification, called Uni- 
versal Business Language. The 
insurance industry's ACORD 
standards group supports that 
specification, which is led by 
Sun Microsystems Inc. engi- 
neer Jon Bozak, a long-time 
UBL proponent. In addition, 
the electronics industry's Roset- 
taNet has submitted its forms 
as a basis for UBL forms. 

Separately, a consortium 
called the Open Applications 
Group Inc. (OAGi) in late Sep- 
tember released a library of 



WSDL files that can be used 
with version 8.0 of its OAGIS 
XML language. The WSDL 
files, available from OAGi's Web 
site, are designed to serve as a 
template and to speed the use of 
OAGIS specifications for Web 
Services and service-oriented 
architectures. Several automo- 
tive industry groups use OAGIS. 

Despite their confusingly 
similar acronyms, there's no 
relationship between the 
OAGIS specification and the 
OASIS organizations. 

Although the two efforts aim 
at similar goals, there are no 
attempts to bring them together. 

The idea of a cross-industry 
form standard is that although 
businesses primarily do business 
within their industry, they also 
need to purchase items such as 
office supplies, furniture, food 
and parts from other industries 
as well. Some organizations, 
such as government bodies or 
major retailers, need to order 




1 -. 

The specifications don't have to be 
exclusive, says Sun's Bozak. 

products and interact with vari- 
ous industries in the regular 
course of business. Having such 
a standard would make it easier 
for businesses to conduct com- 
merce electronically. 

"ACORD has participated in 
UBL and also has worked 
to have some of the ACORD 



structures adopted by UBL," 
said Lloyd Chumbley, assistant 
vice president of standards at 
ACORD. Not only does his orga- 
nization have members helping 
to create the UBL specification, 
but individual insurance compa- 
nies also have helped to shape 
the standard, he said. Chumbley 
described the UBL effort as an 
attempt to "harmonize" specifi- 
cations among those from indi- 
vidual industry groups. In addi- 
tion, he said, the effort would 
standardize the way in which 
different industries extend their 
forms if they need to create an 
extension, or modification for 
an element outside an industry 
specification. 

ACORD will phase UBL 
into future iterations of its spec- 
ifications, he said. 

But OASIS's UBL will not 
be close to universal if the pres- 
ident of OAGi has anything to 
do with it. 

"This is a completely com- 



MainWin 1.5 Ports .NET to J2EE 



BY YVONNE L. LEE 

Mainsoft Corp.'s flagship prod- 
uct, Visual MainWin, has gotten 
a boost from being a tool that 
helped C++ and C# developers 
participate in J2EE products to 
one that can port .NET applica- 
tions to J2EE. 

Visual MainWin released in 
late September takes C# code 
and translates it into Java byte 
code. Prior versions of Visual 
MainWin were focused on 
helping Java teams work 
together with programmers 
who were familiar with C#. 
Because teams working in this 
scenario were more likely to 
know the limitations of using 
specialized .NET features, it 
was not as necessary to build in 
support for those APIs, said 
Andy Milo, senior technical 
account manager. 

"In looking at an existing 
application, you might have 
used specific .NET technology, 
and you're not thinking about 
moving it to Java at the time. 
Whereas, if you start out in co- 
development mode, you're not 
going to do that," he said. " Tak- 
ing that code and converting it 
over to Java is more challenging 
because the breadth of technol- 
ogy you need to support is 
broader." 

Visual MainWin 1.5 costs 



US$5,000 per developer seat 
for two-year license. 

New porting features in- 
clude a porting wizard that 
guides steps through porting 
existing .NET code to the J2EE 
platform. 

"The difference is before we 
were emphasizing cross-plat- 
form development. Now, you 
can take an existing application 
and port it," explained director 
of marketing Jenna Dobkin. 

"The language isn't every- 
thing," said Noam Fogel, vice 



president of research and devel- 
opment at the Israeli broadband 
services company Infogate 
Online Ltd. who said his com- 
pany used a beta version of 
Visual MainWin 1.5 to port its 
OnDema application for a 
telecomm client in Taiwan. "It's 
the language, the framework 
(.NET vs. J2EE), the hardware 
platform and the operating sys- 
tem." The OnDema system pre- 
viously ran only on x86 hard- 
ware running Windows, but can 
now run on Sparc servers run- 



ning Linux, he said. 

In addition to the porting 
capability, Visual MainWin 1.5 
now rehosts ASP.NET ele- 
ments from Infragistics' NetAd- 
vantage 2004 presentation layer 
development toolset on the 
J2EE platform. The Infragistics 
add-on, which costs $1,500 per 
developer, also for a two-year 
license, makes it possible for 
.NET developers to build J2EE 
Web applications and Web 
services using Net Advantage's 
designers and style presets. I 



petitive standard to the stan- 
dards organization I run," said 
David Connelly, president of 
OAGi. "We're way bigger, way 
more mature and have been 
adopted by more industries." 

He also said Bozak was 
using the "bully pulpit of Sun 
Microsystems" to promote his 
specification. 

Bozak disagreed, and said 
the two specifications don't 
have to be mutually exclusive 
and that he doesn't view UBL 
as competing with OAGIS. 

"OAGi perceives us as com- 
petition. That's what I've been 
unsuccessful in persuading them 
about," said Bozak. "I definitely 
believe given our different areas 
that they're going to be much 
stronger in [internal] integration 
than we are." UBL, he said, is 
more narrowly focused on the 
providing a common set of docu- 
ments that can be exchanged 
among organizations. 

"Most electronic commerce 
is EDI," Bozak said. "We're try- 
ing to take that system and fig- 
ure out a way to do businesses 
in a way that can be done 
cheaply enough to get small 
businesses in it. Our concentra- 
tion is very much on the docu- 
ment aspect of this." 

Organizations have been 
conducting business electroni- 
cally since the 1970s using 
Electronic Document Inter- 
change (EDI), he said, but EDI 
required private networks, 
which are impractical for small- 
er businesses to host or partici- 
pate in. Both the OAGIS and 
UBL specifications allow e- 
commerce over the Internet. I 



New Spec to Manage Software and Hardware as a Service 



BY YVONNE L. LEE 

A new specification being 
developed by will make it possi- 
ble to build Web services that 
manage enterprise hardware 
and software. 

The specification, called WS- 
Management, profiles network 
hardware and software, and 
works with other Web services 
specifications, including WS- 
Security and WS-ReliableMes- 
saging, said John Tollefsrud, 
director of standards for Nl 
Grid Systems at Sun Microsys- 
tems Inc., one of the companies 
working on the specification. 
Advanced Micro Devices, Dell, 
Intel, and Microsoft are the 



others. "Monitoring the health 
of that environment requires a 
lot of integration of these 
resources," he said. 

As an example, Pete Mc- 
Kiernon, lead product manager 
for Microsoft Corp.'s platform 
strategy group, said a service 
could discover that a printer has 
a defective part, and then both 
alert the IT staff and order a 
new part. This would integrate 
both financial applications and 
traditional network monitoring, 
he said. 

"The unique thing about this 
approach is that it's looking at 
building management at the 
outset. Today management is an 



afterthought," said McKiernon. 

Although the specification 
could be used solely in soft- 
ware, part of it could be inte- 
grated into hardware as well, 
and be used to manage hard- 
ware from servers to printers to 
networks, McKiernon said. 

Microsoft plans to support 
WS- Management in the next 
releases of Windows Server and 



Operations Manager. Intel 
plans to support it in its plat- 
form building blocks and will 
announce specific plans later. 

The participating companies 
in mid-October presented the 
specification to the Distributed 
Management Task Force 
(DMTF), an industry consor- 
tium that deals with manage- 
ment specifications. I 



DOWNLOADS FOR WS-MANAGEMENT 



www.amd.com/webservices 

www.dell.com/standards 

www.intel.com/technology/manage 

msdn.microsoft.com/ws/2004/10/ws-management 

developers.sun.com/techtopics/webservices/management 
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Kabira: Its About Getting the Message 



BY EDWARD J. CORREIA 

Already getting too much spam? 
It may soon get a whole lot 
worse. 

Kabira Technologies Inc., 



transaction processing systems 
of eTrade, Visa, Vodafone and 
others, claims that Transaction- 
al Switch 2.0, the latest version 
of its integration framework 



plifies development of real- 
time data flows, putting them 
within reach of more enterpris- 
es than just the financial and 
telecom superpowers. 



Infrastructure System 5.0, a 
64-bit edition of its back-end 
system (formerly known as 
Infrastructure Switch) for 
HP/UX and Solaris that in- 



the company behind the online released in mid-October, sim- The company also released eludes an in-memory database 
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that it claims can now hold all 
records in memory, irrespec- 
tive of size. 

"Let's say you're Starbucks," 
illustrated David Marshall, 
Kabira's vice president of mar- 
keting and corporate devel- 
opment, using the international 
coffee chain as an example. "You 
could easily build an application 
that would send an SMS mes- 
sage to all the cell phones within 
range of a certain store offering 
a dollar off a latte in the next two 
hours," he said. 

Marshall, who described 
several other such examples, 
including a list of local hotels 
displayed to a travelers while 
using an ATM, also was quick to 
acknowledge the scourge of 
unsolicited communications. 
"Nobody likes spam. So if your 
profile said you didn't want 
those types of messages, they 
could be shut off." 

Another use of the technolo- 
gy, according to Marshall, could 
be to help increase security of 
financial transactions using the 
camera on many ATMs. A 
moment after an ATM card is 
used, he said, an SMS message 
could be sent to a cell phone 
registered to the owner of that 
debit card with a picture of the 
person using it attached. "The 
technology traverses telecom, 
financial GIS and other net- 
works, all of which have differ- 
ent and diverse APIs." 

The way Transaction Switch 
simplifies development, accord- 
ing to Jena- Louis Hoenen, Kabi- 
ra's vice president of telco strate- 
gy, is by abstracting inbound and 
outbound connectivity into so- 
called channels, presenting 
developers with a simple envi- 
ronment for building business 
rules and data flows. 

"Just like the switch on a 
telecom network, these sys- 
tems are built using a switch 
for transactions," he said, and 
includes prebuilt channels for 
communications between an 
ATM and a cell phone, for 
example. "You pick the proto- 
col, do the data mapping and 
set up the rules for data trans- 
formation and flow." Among 
the long list of channel proto- 
cols are those for flat files, and 
databases and network apps on 
TCP/IP, SNMP, x.25, MQ 
Series and mainframe systems. 

Infrastructure System 5.0 
and Transaction Switch 2.0 cost 
US$100,000 per server proces- 
sor. According to Marshall, a 
typical installation costs closer 
to $250,000 after the cost of 
integration and services. I 



Hi*T».1inBJir<ILL"i. 



ADVERTISEMENT 



Software FX Puts Chart FX Right In Your Pocket 

Leading carting technology mow available for the .NET Compact Framework and Smart Device? applications. 
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, COMPANIES , 




eCosCentric Ltd. has contributed the Serial Peripheral Interface bus 
to the public eCos real-time operating system project. The code was 
initially developed for eCosPro, the proprietary commercial version 
of eCos. 



NEW PRODUCTS 



jProductivity LLC is offering Protection Pro, a software-licensing 
framework for Java that can be embedded into custom applications. 
The Pro version, unlike the original Protection product, offers named 
user, MAC address-based and floating licenses, and lets licenses be 
managed via Web services or RMI. Protection Pro costs US$699 per 
developer, with no end-user deployment costs . . . The Apache Soft- 
ware Foundation has released Pluto, a ref- 



1 AqscNhb 

S#ftw*he Fflihdllifln erence implementation of JSR-168, the 
Java Portlet Specification. Pluto serves as 
a portlet container that implements the Portlet API . . . QL2 Software 
Inc. has introduced an Interactive Analytics Module that can be used 
with its hosted Web mining and unstructured data management appli- 
cations. Access to the module costs from US$8,000 to $50,000 annu- 
ally, depending on usage levels . . . Scientific Component is offering 
GPS ToolKit.NET 1.0, a component for adding real-time global posi- 
tioning system support to .NET applications. The component costs 
US$179 per developer . . . IBM Corp. has shipped DB2 Information 
Integrator, which allows SQL queries to span disparate data sources, 
including Web pages, relational databases and content management 
repositories . . . Telelogic AB has introduced Enterprise Architect for 
DoDAF, a government-compliant modeling tool based on the compa- 
ny's DOORS requirements management system and TAU/Architecture 
UML modelers. The new tool is designed to implement the Department 
of Defense's Architecture Framework . . . Verisign Inc. has launched 
EPC Application Developers Program, designed to help organizations 
link the EPCglobal Network into their 
RFID-enabled applications. EPCglobal is a 
multi-vendor network that distributes 
electronic product code information over 
the Internet . . . Uniblue Systems Ltd. has launched 
ProcessLibrary.com, a Web site that provides identifiers and technical 
information about Windows system processes and common applica- 
tions, as well as threats . . . Majitek Ltd. is offering a free "communi- 
ty" version of its InterMajik IDE for building interconnected devices 
that can communicate within its Majik software framework. The com- 
pany will be offering a commercial version later this year . . . MetaCase 
Consulting has introduced a version of its MetaEdit+ modeler and 
code editor for Mac OS X. MetaEdit+ 4.0 includes a method workbench 
that lets developers define a modeling language as a metamodel, and 
a code generator to turn models into code. Other versions of MetaEd- 
it+ run on Linux, Unix and Windows . . . ComponentOne LLC has 
released Response for Embedded Self-Service, a set of SOAP-based 
tools for letting application users browse online tech-support without 
exiting their application . . . Softlntegration Inc. has updated Ch, its 
family of C/C++ interpreters. Version 4.7 adds input/output redirec- 
tion, queries to obtain information about variables and functions in a 
Ch script, and interfacing functions with a variable number of argu- 
ments . . . Allen Systems Group Inc. has rebranded and enhanced its 
ASG-becubic software analysis suite. Now in version 6.0, and called 
ASG-Application DNA, the suite uses dynamic introspection to dis- 
cover elements of active applications, and can parse information in 
source code and database definitions. The new version focuses on dis- 
covering how application and data are interrelated. 
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UPGRADES 



IBM Corp. has updated z/OS, the operating system for its mainframes. 
Version 1.6 adds support for new hardware, and also adds new Unix- 
compatible commands, an enhanced 64-bit C/C++ development run- 
time system, and a new C/C++ compiler that's compatible with the 
z890 and z990 servers. IBM is also offering a 64-bit Java 1.4.1-com- 
patible SDK for z/OS 1.6. This ver- 



iSpheres Offers Open-Source 
Event Processing Language 



BY YVONNE L. LEE 

Contending that it's just too dif- 
ficult to build applications that 
respond to events in the real 
world using current program- 
ming languages, iSpheres Corp. 
is offering an open-source, 
copyright-free SQL-like lan- 
guage for processing these 
kinds of requests. 

The Oakland, Calif, company 
also will begin shipping a server 
for processing the language and 
tools for creating programs that 
use it. 

The Event Processing Lan- 
guage, or EPL, employs time- 
based persistent "ON-WHEN- 
THEN" queries against asynch- 
ronous data flows and historical 
context data. 

"The important thing we're 
announcing is the concept of an 
event-driven language," said 
vice president of marketing 



Gary Ebersole, adding that 
iSpheres would embrace anoth- 
er event-based language if a 
large vendor or consortium 
were to promote one. "We do 
believe that there will evolve an 
event processing language. This 
is a starting point." 

Without an event-based lan- 
guage, programmers have to 
use lower-level languages that 
address the inner workings of 
the machines, Ebersole said. 

EPL will be available from 
iSpheres Web site without copy- 
right or royalty fees, he said. 

"We don't want to declare 
ownership; we don't want to 
declare this is the definitive 
specification," he said. 

How the company does 
intend to make money is by 
selling the server to process 
EPL, he explained. 

ISpheres' server, EPL Serv- 



er/05, is in early access and is 
slated for general availability 
in December. A deployment 
license for a single server is 
US$25,000. 

It combines event processing 
engines with visual development 
and management tools. The 
software can operate either as a 
remote server or as an embed- 
ded application service. The 
server performs data filtering, 
real-time and historical correla- 
tion, text mining, state tracking 
for negative events, incremen- 
tal computation, sequencing, 
polling and windows for statisti- 
cal analysis over time. 

The server ships with an 
IDE-like EPL Studio for creat- 
ing EPL requests. EPL Studio 
includes syntax checking, a sys- 
temwide view of data sources, 
stream and event definition edi- 
tors and help. I 
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iSpheres' EP Studio includes the company's language for building applications that respond to events in data streams. 

Mindreef SOAPscope 4.0 Adds Workspace 



BY YVONNE L. LEE 

A collaborative workspace for 
developers and testers to use is 
a central new feature in the lat- 
est version of Mindreef's 
SOAPscope Web services diag- 
nostic tool. 

Mindreef defines a work- 
space as an area on the SOAP- 
scope screen that lists the most 
recently accessed artifacts 
from a Web service, and in 
which developers can store 



problem data or code for easy 
access. A related feature called 
"packaging" is Mindreef's pro- 
prietary file format for sharing 
that problem data among the 
work group members. 

"Workspace allows me to 
group together aspects of my 
testing so that I can work on it 
at one time," said chief technol- 
ogy officer Mark Ericson. 

SOAPscope 4.0, which 
began shipping in late Sep- 



tember, adds a graphical 
WSDL display feature called 
WSDL closures. A WSDL clo- 
sure visually groups together 
documents that a WSDL file 
references. 

The US$99 tool now also 
can test Web services security 
using SSL certificates and for 
compliance with Web Services 
Interoperability Organization's 
WS-I Basic Profile 1.1 and WS- 
I Attachments Profile 1.0. I 



4 Seapine Software 



Managers crave process controL 
Bridge the gap with Seapine CM. 

Software development il a team effort with developers, testers, 
and management all working toward one goal — delivering the 
highest quality product on time. 



Built on a word- winning TestTrock Pro and Surround SCM, 
Seapine CM brings structure to source control and issue 
management, improving communication while accelerating 
product development. 

Seapine CM helps your team,.. 

Defme custom change request workflows, putting you in control 
of who makes chancres one/ who authorizes the closure of issues. 

Associate source cade changes wftfr defects or change requests. 
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before proved comp/dibn 

View complete audit trails of what changed, why, and by whom. 

Understand how elate you ore to release— how many issues are open, 
ham qukkiy are you closing them f haw many are re-opened? 

Successful team-based development requires the proper process 
supported by the right develop men! tools. Tools that ore 
flexible, easy to use, secure, and scalable— like Seapine CM. 
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iBolt 2.0 Gets Visual with Mapping, Dynamic with XML 

EAI suite adds integration-mapping GUI, supports native Java for connectors 



BY EDWARD J. CORREIA 

Plain, simple and dynamic. 
That's how EAI tools develop- 
er Magic Software Enterprises 
Ltd., describes the Oct. 15 
release of the latest version of 
its enterprise integration suite. 
The new version reportedly 
lets developers build integra- 
tion connectors using plain 
Java classes, simplifies the 
mapping of data sources with a 
visual editor, and can dynami- 
cally update XML components 



to help avoid performance bot- 
tlenecks. 

According to Glenn John- 
son, Magic's director of mar- 
keting, iBolt 2.0's so-called 
XML hot components feature 
is among the most significant in 
the release. Johnson explained 
how the server-side enhance- 
ment allows components to be 
configured while in use at each 
instance of a data flow. A set of 
XML-based parameters is 
passed to the component along 



with the flow data, he said. 
"This allows a sophisticated 
level of interaction within a 
business process where the 
results of processes can recon- 
figure and fine-tune a business 
process on the fly. This hap- 
pens live during the execution 
of a flow." 

Johnson said the system's 
monitoring component can be 
used to identify data-flow prob- 
lems and pass that information 
to business flow hot-compo- 



Macromedia Tweaks 'Fit and Finish' of Flex 



BY DAVID RUBINSTEIN 

Updates to Macromedia Inc.'s 
Flex presentation server and 
application framework, avail- 
able early this month, are most- 
ly about "fit and finish," accord- 
ing to vice president of product 
management Jeff Whatcott. 

Flex is a J2EE-based server 
application that is used to cre- 
ate and deliver rich media apps 
using Macromedia's MXML 
and ActionS cript languages. . 

Version 1.5 will sport new 
visualization components for 
charting and graphing, enhance- 
ments to data grids, the ability to 
customize the user interface and 
improved performance, What- 
cott said. 

The new out-of-the-box com- 
ponents bring additional func- 



tionality that developers can use 
to build more effective applica- 
tions, Whatcott explained. The 
charts and graphs, which often 
appear in such applications as 
executive dashboards, are cus- 
tomizable, he said. The data 
grids now allow row and column 
nesting, he added. 

Flex applications are built 
with a look and feel called 
"Halo," Whatcott said. But 
developers creating consumer- 
facing applications can cus- 
tomize the application by putting 
their own skins on top of the Flex 
framework. "Styling lets devel- 
opers customize the look and 
feel just through cascading style 
sheets, the colors, and bevel box- 
es," he said. "The next step is to 
build out custom skins. It's now 



easier because a developer can 
define them as graphical assets 
in Flash. There's a cleaner sepa- 
ration of the component and the 
skin of the component." 

Additionally, the Flex server 
now can run in the Fujitsu 
Interstage 6, Oracle lOg and 
WebSphere for AIX application 
servers. It already could run in 
WebSphere on Linux, Solaris 
and Windows, Whatcott said. 

Whatcott said the company 
has a major 2.0 release in the 
works but would provide no 
details. He also said Macrome- 
dia hopes to have a .NET ver- 
sion of Flex completed at the 
same time as the Flex 2.0 
release, saying that users want to 
be able to run the Flex server 
natively in a Windows server. I 



Buy Shows Asian Presence 
Important To Ascential 



BY EDWARD J. CORREIA 

Enterprise integration company 
Ascential Software Corp. in late 
October purchased iNuCom 
Inc., a contract developer based 
in Hyderabad, India, that it had 
previously engaged to build 
some of its connectivity and 
integration adapters. In an all- 
cash deal valued at US$250,000, 
Ascential will retain all of iNu- 
Com's 47 employees, including 
38 engineers; all will remain in 
India. 

"Instead of having a contract 
relationship, we wanted to have 
a presence in India directly," 
said Ascential president Pete 
Fiore. "This allows us to tie in 
more tightly with our develop- 
ment team here and control our 
own destiny. These people have 



gotten to know our technology 
really well and we didn't want 
them to work for another com- 
pany and lose what we've devel- 
oped over time." 

Fiore said the move also was 
designed to address technical 
support and operations require- 
ments of a growing customer 
base in the Asia-Pacific region, 
and increase its engineering 
capacity and augment R&D 
facilities in the U.S. and U.K. 
"We're an innovation company, 
so we have to keep accelerating 
our innovative capacity." 

Fiore said there also were 
economic benefits. "This 
allows us to do more with the 
same amount of spending." 
Why the relatively low price 
tag, when so many technology 




Having a direct presence in India 
allows us to control our own 
destiny, says Ascential's Fiore. 

acquisitions are described in 
the millions? "iNuCom didn't 
own buildings or product 
assets that generally make 
acquisitions more expensive," 
he explained. Ascential still 
engages development contrac- 
tors in India and elsewhere in 
the world, he said. I 



nents to help improve overall 
system performance. "For 
instance, the system may find a 
bottleneck and pass along to the 
component new information 
based on that bottleneck to 
reconfigure it to help avoid 
those bottlenecks." 

Pricing remains 
unchanged, and starts 
at US$87,000 per pro- 
duction environment, 
including integration 
server, activity monitor 
and studio compo- 
nents. The suite runs 
on Linux, O/S 400, 
Unix and Windows 





Business process 
flows can fine-tune 
themselves, claims 



VISUAL MAPPING 

New in the studio Magic's Johnson 
component is visual 
integration mapping, which 
Johnson claimed goes beyond 
traditional data mapping tools, 
most of which he said only 
provide many-to-many map- 
pings for SQL files and tables 
and flat files. iBolt's tool, he 
said, also maps inputs to and 
from logical components, flow 
variables and business-process 
data stores. "This is important 
because it brings sophisticated 
data and logical transforma- 
tion techniques to the user 
level, enabling programmers 
and systems architects to 
quickly map data and control 



business process flow, and use 
that within the integration 
process." 

The alternative, he said, usu- 
ally equals plenty of coding 
"and what we call fragile inte- 
gration logic. This allows the 
programmer to focus more on 
creation of program 
logic and less on inte- 
gration logic, which 
can become outdated 
or useless as business 
rules or the IT envi- 
ronment changes." 

Also significant, 

according to Johnson, 

are Java wizards, 

which he said enable 

iBolt to use Java 

natively for creating 

custom connectors 

and integration com- 

"This provides a way 

to call Java classes and set 

values to get values from Java 

class fields." 

The wizards let users select 
the class to be used and step 
through its methods, fields and 
constructors, without having to 
wrap it, expose it or encapsu- 
late in an Enterprise Java 
Bean, he explained. "Nothing 
has to be done to a Java class or 
component in order for it to be 
used in an integration. Java's 
entire class library is now avail- 
able to you as an integration 
programmer." I 



ponents. 



OSELLUS' IRIS GIVES NEW 
VIEW OF PROCESS MODELING 



BY YVONNE L. LEE 

Osellus Inc. will introduce a 
new version of its software- 
process modeling tool next 
month designed to not only 
integrate modeling, deploy- 
ment and monitoring, but also 
to display to developers within 
their development environ- 
ment the tasks they need to 
accomplish to complete the 
project. 

Iris 1.1 will present the 
required tasks within Microsoft 
Corp.'s Visual Team System or 
Eclipse. A hosted version also is 
available. 

"It will be more focused on 
working from within whatever 
tool the developer is familiar 
with," said Sammy Wahab, 
Osellus' director of professional 



services. Previously, the tool dis- 
played tasks from within a por- 
tal application, he explained. 

The software includes three 
modules: the Process Author 
for visually modeling the pro- 
cess flow, Process Live for 
deploying it, and Process Met- 
rics for testing and measuring. 
The Process Author includes a 
Process Library, a customizable 
framework of process models 
from which to create processes. 

Osellus also is negotiating 
with Borland Software Corp. to 
integrate the software into Bor- 
land's JBuilder. Iris 1.1 will ship 
in November. "If you buy the 
whole suite, it's about US$3,000 
per active user license," said 
Wahab. A hosted version also is 
available, said Wahab. I 
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MKS Enters Requirements Management 



Claims add-on to its SCM tool offers lightweight alternative to competitors 



BY JENNIFER DEJONG 

Software configuration tools 
vendor MKS Inc. made its first 
foray into the requirements 
management market last month, 
announcing plans to extend its 
enterprise SCM offering. 

Promised for January deliv- 
ery, MKS Requirements 2005 is 
not geared to development 
teams managing multiple, 
interrelated, large projects that 
need "heavyweight" require- 
ments management capabili- 
ties, said Brad Van Home, 
MKS integrations manager, at 
the Waterloo, Ontario compa- 
ny. Instead, it is aimed at teams 
managing a few, small projects. 
"We didn't set out to say we are 
DOORS, CaliberRM, and Req- 
uisitePro," he said, referring to 
offerings from Telelogic, Bor- 
land and IBM's Rational divi- 
sion, respectively. 

MKS Requirements is not a 
standalone product. It adds re- 
quirements management capa- 
bilities to Integrity Suite Enter- 
prise, which includes MKS' 
SCM tool Source Integrity as 
well Integrity Manager, for 
process and workflow. Because 
the requirements management 
features are integrated with 
workflow and configuration 
management capabilities, devel- 
opment teams can view in a sin- 
gle report where a project stands 
across the entire development 
life cycle, including require- 
ments, features, development 
tasks, bugs and testing, said Van 
Home. "When you make a 
change to a requirement, people 
downstream will know about it. 
They can't carry on in oblivion 
without resolving it." 

Also new is the ability to 
create a report that compares 
where a project stands today 
with where it stood two months 
prior, as well as a tree view that 
breaks down a project into a 
hierarchical structure, not just 
a list of issues that need to be 
resolved. "We can merge the 
two reports into a single docu- 
ment," where additions are 
highlighted in green, and dele- 
tions are noted in red, said Van 
Home. 

MKS' new requirements 
capabilities are built into 
Integrity Manager, and will be 
sold as an additional license to 
that product. The company did 
not say how much the license 



will cost. The new capabilities revenues, said Van Horn. ties, but said that MKS' offering 

will bring business analysts into He acknowledged that com- is built from the ground up, 

the development process, petitors offer suites of products while competitors extended 

enabling MKS to increase its that provide the same capabili- their product lines through 



acquisition. Borland acquired 
StarBase Corp. in 2002 and 
TogetherSoft in 2003; IBM 
bought Rational in 2002; and 
Serena purchased Merant and 
Integrated Chipware this year. 
"Everyone is addressing the life 
cycle development market. We 
are all just calling it different 
things," he said. I 
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ASNA Leads Journey From RPG to .NET 

Migration tool helps modernize aging IBM midrange applications for new platforms 



BY JENNIFER DEJONG 

What's the best way to modern- 
ize applications written in RPG? 
Given that such applications 
are designed for IBM Corp.'s 



midrange computers, Java might 
seem like the obvious answer. 
But according to Eduardo Ross, 
vice president of research and 
development at ASNA Inc., 



.NET is a better fit. Java forces 
RPG developers to learn a new 
language, while .NET allows 
them to stick with the one they 
already know, he said, by using 



the company's Visual RPG com- 
piler for the .NET Common 
Language Runtime. 

The San- Antonio-based ASNA 
has announced Monarch, a 
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migration tool that helps RPG 
developers move all or part of 
their applications to .NET "If 
you stay on the iSeries [and 
RPG], you are trapped into an 
older language with a character- 
based environment and a limit- 
ed ability to enable technologies 
such as Web services," said Ross. 
New applications aren't being 
written in RPG, but 80 percent 
of existing applications for the 
IBM iSeries (formerly known as 
the AS/400) are, he noted. 

The idea behind Monarch is 
to let RPG developers move 
away from the language at their 
own pace, without forcing 
them to jump headfirst into 
.NET For instance, a develop- 
er working with a financial 
application written in RPG 
might choose to migrate only 
that portion of the application 
pertaining to employee bene- 
fits, leaving the rest to run on 
the iSeries, said Ross. 

To help developers perform 
the migration, Monarch visually 
depicts the objects that the 
RPG application is made up of, 
including data files, menus, 
modules and method files, 
among others. Developers can 
then specify which subset of 
objects — say, for example, 
those pertaining to employee 
benefits — they want to migrate. 
Monarch then translates the 
selected code into a format that 
can be compiled by ASNA's 
Visual RPG for .NET into 
Microsoft Intermediate Lan- 
guage, said Ross. 

A single license for Monarch 
to fully migrate all an enterprise's 
iSeries applications typically 
costs about US$90,000, a com- 
pany spokesperson said. Ross 
claimed that Monarch has no 
direct competitors, but there are 
alternative approaches out there. 
Companies such as Mincron 
Software Systems, in Houston, 
Texas, offer products that trans- 
late RPG applications into Java. 

Over time, developers are 
likely to migrate an entire RPG 
application to .NET, but the 
staged approach introduces 
them to concepts such as object 
orientation and Web services 
gradually, said Ross. "If you 
want to write a 'Hello World' 
program in Java, you need 
to understand object-oriented 
programming." Visual RPG for 
.NET shields the programmer 
from that, he said. I 
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Kenai Checks Web 
Services for Security 



BY YVONNE L. LEE 

Startup Kenai Systems Inc. in 
December will ship Web ser- 
vices monitoring software 
geared toward developers for 
the purpose of preventing secu- 
rity vulnerabilities. 

"In this environment you 
have to do some Web services 
testing because that's where the 
vulnerabilities get in," said chief 
technical officer Jack Quinnell. 
For example, the US$70 soft- 
ware, called Examine 1.0, can 
uncover areas where Web ser- 
vices can allow out-of-range 
values, Quinnell said. 

While this software is 
designed for developers, the 
California company hopes to 
expand its product line to oth- 
ers in the testing and quality 
assurance process, said founder 
Byrren Yates. 

Examine 1.0 enables devel- 
opers to import WSDL files 
and to test them for security 
vulnerabilities stemming from 
failure to comply with stan- 



dards, failure to require 
authentication, mishandling 
digital signatures and failure to 
encrypt data, as well as areas 
that could be subject to probes, 
coercive parsing or external ref- 
erence attacks. It can open, 
browse, save, list, search and 
display WSDL files, and can 
test Web services locally and 
remotely. Searches and tests 



can be saved and reused. 

The beta version is available 
now as a standalone version. 
The product is slated for gener- 
al availability both as a stand- 
alone tool and as an Eclipse 
plug-in Dec. 15. I 

Kenai Systems' Examine can dis- 
play Web services' WSDL files and 
can test for expected responses. 
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C-SHARPENER POINTS VB.NET TO C# 



BY JENNIFER DEJONG 

A small consulting services 
company launched its first 
product last month, offering a 
tool that converts code written 
in Visual Basic .NET to C#. 

C-Sharpener for VB, from 
Elegance Technologies Inc., is 
aimed primarily at C# pro- 
grammers who want to convert 
existing VB.NET subprojects 
for use in C# applications, said 
Roger Jack, president and co- 
founder of the Philadelphia- 



based company. 

A plug-in for Visual Studio 
.NET, C-Sharpener, which costs 
US$199 per developer, uses 
wizards to guide programmers 
through the conversion process. 
They simply specify which pro- 
ject they want to convert and 
where they want the code to go, 
and the code is automatically 
translated using symbol table 
technology, said Jack. C-Sharp- 
ener is essentially a parser that 
emits C# instead of MS Inter- 



mediate Language (MSIL), he 
explained. 

The tool successfully con- 
verts 99 percent of the 
VB.NET code, claimed Jack. 
But some statements, such as 
"on error resume next," which 
originated in VB.NET's prede- 
cessor, Visual Basic, must be 
translated by hand, he said. A 
free trial version of C-Sharp- 
ener, which converts up to 500 
lines of code, is available at 
www. elegancetech. com/C S VB 



_Download.aspx. 

Although its offering is 
aimed at C# programmers, Ele- 
gance expects C-Sharpener will 
also be used by VB.NET devel- 
opers. Both languages are part 
of the .NET Framework, but 
many VB.NET programmers 
want to move to C#, he said. 

Regardless of which camp 
they come from, developers have 
to know so many languages just 
to work across a project, Jack 
said. "We are putting too much 
of a burden on the programmer, 
when computers are good at 
doing the tedious translation." I 
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NetManage on Host Transactions: Treat 'em Like Objects 

New OnWeb Object Builder wraps mainframe applications for J2EE r .NET 



BY EDWARD J. CORREIA 

It's a wrap. According to host-to- 
Web tools maker NetManage 
Inc., OnWeb 7.1, the latest ver- 
sion of its front-end builder, can 
now wrap host transactions as 
objects, which can be used by 
other developers without knowl- 
edge of the host or the OnWeb 
environment. 

"For example, if I wanted 
to wrap a host transaction as 
an EJB," said Roy Mitchell, 
NetManage senior product 
manager, "I simply navigate 
the host screens to collect the 
data I want off the host, and 
then generate the EJB." What 
the US$2,500 per-seat tool 
would generate in this case, 
Mitchell claimed, is an Enter- 
prise Java Bean with the same 
inputs and outputs that a Java 
developer would expect of any 
other EJB. 

Mitchell claimed the tool 
works just as well with other 
object types. "Developers can 
also encapsulate a host transac- 
tion as a .NET assembly, Web 



service, JavaBean, portlet or 
XML object and integrate a 
host system with a new applica- 
tion, be it Java or [.NET]," he 
said. "They don't need to know 
how to talk to OnWeb or the 
mainframe." 

Also new is support for JSR 
168 portlets, which Mitchell said 
permits OnWeb-based HTML 
front ends to be deployed to Java 



portals that support that interop- 
erability spec. "Now a corporate 
portal can host mainframe trans- 
actions — a customer address 
lookup, for instance," he said, 
adding that OnWeb front-ends 
can range from plain green- 
screen representations of legacy 
apps to fully-blown GUI designs. 
OnWeb can be used as a 
stand-alone IDE or as a plug-in 



to Visual Studio .NET; version 
7.1 now also integrates with Bor- 
land's JBuilder. Mitchell said an 
Eclipse-based version is on the 
horizon for early next year. 

Deployment of OnWeb 
front ends requires OnWeb 
Server, middleware for Unix/ 
Apache servers or Windows 
servers running IIS or Apache. 
The software costs $300 per 



user plus $12,000 per server for 
Windows or $15,000 for the 
newly-released Solaris edition. 
Mitchell said the company will 
release AIX and Linux editions 
later this year. 

The new version of the 
server software also includes 
load balancing and an SSL lay- 
er between OnWeb and main- 
frame or iSeries servers. I 



Embarcadero Adds SCM Integration to Schema Manager 



BY DAVID RUBINSTEIN 

Embarcadero Technologies 
Inc. has released version 3.0 of 
its Change Manager database 
schema management utility 
with new integrations to source 
code management tools, new 
database support and the ability 
to extract and store the Data 
Definition Language (DDL) 
that defines the schema into 
the SCM tools. 

According to product man- 
ager Dave Ross schema snap- 
shots and archives now can be 



stored in IBM's Rational Clear 
Case, Microsoft's Visual 

SourceSafe and Serena's PVCS 
code management systems. A 
schema defines the structure of 
the database — the tables, views, 
procedure and index, as well as 
users and permissions, among 
other things. 

Using Change Manager, 
developers and database admin- 
istrators can compare changes in 
an application against the origi- 
nal schema "to ensure the right 
changes have migrated forward, 



or that things haven't changed 
from staging to production," 
Ross said. This, he explained, 
helps cut down on mistakes, 
speeds deployment and lowers 
maintenance costs. "It reduces 
the risk at rollout," he added. 

Change Manager automati- 
cally generates commands for 
creating views, or the index, or 
tables, he said, and "it under- 
stands when it can use an 'alter 
table' SQL command, or create 
a new object to new specifica- 
tions and repopulate the data if 



'alter table' doesn't make it." 

Also, the US$1,995 Change 
Manager now has a function 
that enables the DDL— SQL 
text made up of CREATE 
TABLE statements and other 
CREATE statements— to be 
extracted during archiving, pro- 
viding an additional means of 
documentation, he said. 

The latest version of Change 
Manager works with IBM's DB2 
database; it already worked with 
Oracle, Microsoft's SQL Server 
and Sybase, Ross said. I 
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WebSphere Gains New Messaging Engine, Standards 

IBM commits to enterprise service bus in 6.0 release of application server 



BY JENNIFER DEJONG 

IBM Corp. unveiled the next version of 
its J2EE application server last month, 
overhauling the server's messaging infra- 
structure and adding support for recent 
Java and Web services standards. 

Promised for December, WebSphere 
Application Server 6.0 is expected to sup- 
port J2EE 1.4, WS-Security, WS-Trans- 
actions and UDDI 3.0. "Web services 
support is key in communicating beyond 
Java," said IBM's director of WebSphere 
foundation software Bob Sutor, noting 
that many people refer to J2EE 1.4 as 
"the Web services Java release." 

With 6.0, the first major upgrade 
since it delivered 5.0 at the end of 2000, 
IBM has completely rewritten the appli- 
cation servers messaging engine, making 
it easier for developers to connect to 
applications and data sources, without 
having to custom-configure each connec- 
tion. "An app server lives and dies by its 
ability to communicate with the rest of 
the world," said Sutor. The new messag- 
ing engine enables the app server to deal 
with all sorts of different protocols — 
TCP/IP, JMS, SOAP over HTTP— as 
well as future protocols that may come 
along, he said. In earlier versions, such as 



5.1 released last year, IBM had to add 
support for each protocol separately. The 
new engine runs five times faster and is 
written entirely in Java, while the previ- 
ous one was also "tied to older messaging 
code," Sutor said. It supports Enterprise 
Service Bus (ESB) technology, but also 
incorporates IBM's MQ messaging tech- 
nology, he said. 

ESBs have been defined by research 
firm Gartner Inc. as "a new architecture 
that exploits Web services, messaging 
middleware, intelligent routing and 
transformation." BEA Systems Inc., 
IBM's key application server competitor, 
plans to add ESB technology to its 
Web Logic platform with the Quicksilver 
messaging product promised for next 
year, BE As vice president of product 
strategy and product management, Vit- 
torio Viarengo, said in statement. 

In addition to supporting WS-Securi- 
ty, a specification for authenticating 
communication among Web services, 
WebSphere 6.0 supports WS -Transac- 
tions, designed to assure Web services 
transactions are consistently delivered. 
To do so, IBM rewrote the transaction 
manager in WebSphere 6.0, enabling it 
to tie into transaction management sys- 
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terns on the mainframe as well as to take 
advantage of the new standard, Sutor 
said. That automates the process of deal- 
ing with "atomic" transactions, such as 
checking inventory, which complete 
quickly, as well as more time-consuming 
ones, such as getting an employee to 
approve a document. 

Also new to 6.0 is support for UDDI 
3.0, which lets developers subscribe to 
changes made to the universal registry, 
noting when an existing Web service is 
updated or a new one appears. The 
ability to communicate more effective- 
ly with the registry will improve its use- 
fulness, Sutor said. "The concept of a 
single registry, covering the entire uni- 
verse, has never been quite true." 

Sutor estimated WebSphere 6.0 can 



handle twice as many simultaneous con- 
nections as previous versions could. 
Other improvements include the ability 
to automatically handle failovers; sup- 
port for IP v6, which extends the naming 
scheme for IP addresses; and more com- 
plete support for Java Server Faces 
(JSF). In addition, IBM has eased the 
process of migrating from older versions 
of the application server to the new one. 
"You don't have to take the whole thing 
down and migrate it at once. You can do 
it incrementally," he said. 

Developers have "flashes of intellectu- 
al brilliance," but most of the time they 
are simply carrying out routine tasks, 
Sutor said. "Write some code; test it; write 
some code; test it. [With WebSphere 6.0], 
we are making those tasks easier." I 



IBM Repackages Tools 
Around Rational, Eclipse 



< continued from page 1 

IBM's Software Development Plat- 
form is similar to the plan Microsoft Corp. 
articulated in May for Visual Studio Team 
System, as well as the plan Borland Soft- 
ware Corp. announced in September for 
Themis. While IBM expects to deliver its 
offering by year's end, the Borland and 
Microsoft offerings are promised for 
2005. "This is our biggest announcement 
in four or five years," said IBM Rational's 
general manager Mike Devlin. "We are 
transforming and simplifying develop- 
ment as no one else has done." 

The platform is designed to support 
"business-driven development," said 
Devlin. "When we talk about application 
life cycle management, its starts with the 
business and moves all the way down to 
deployment and operations," he said, 
noting that the Atlantic announcement 
completes the vision IBM began to 
articulate when it acquired Rational 
Software in 2002. 

IBM Software Development Plat- 
form includes: Portfolio Manager, which 
lets project managers and business line 
executives track and monitor every 
aspect on a development project; Soft- 
ware Architect, which offers high-end 
modeling tools based on UML 2.0, as 
well as application development, Web 
development and software configuration 
management capabilities; Software 
Modeler, which provides rudimentary 
UML 2.0 modeling features; Manual 
Tester, which lets QA professionals and 
others create tests at every stage of the 
development cycle. Also included are: 
IBM Rational Application Developer for 
WebSphere Software (formerly Web- 
Sphere Studio Application Developer) 
and IBM Rational Web Developer for 



WebSphere Software (WebSphere Stu- 
dio Site Developer). In addition to new 
names, both offerings support Eclipse 
3.0, as do the other products in the Soft- 
ware Development Platform, and 
include new features that reduce the 
need for manual coding. 

IBM positioned four offerings as new, 
but Devlin acknowledged that Software 
Architect, Software Modeler and Manual 
Tester are all based on existing modeling, 
application development, and software 
configuration management tools. 

Architect, which costs US$5,500 per 
user, is aimed at those who want to take 
advantage of all of UML 2.0's capabilities, 
and also includes Application Developer, 
Web Developer, Software Modeler as 
well as Rational ClearQuest and 
ClearCase, IBM's software configuration 
management tools. 

Modeler, which costs $1,795 per user, 
is geared to developers new to modeling, 
and includes basic UML 2.0 diagrams, 
such as Class and Sequence. "You can 
overwhelm the user with too much tech- 
nology," said Devlin, noting that some 
development teams don't need full-blown 
modeling capabilities. 

Manual Tester, which costs $1,500 per 
user, evolved from Rational testing offer- 
ings, including Functional Tester, but also 
incorporates the capabilities found in 
Hyades, an Eclipse testing project. Port- 
folio Manager is based on technology 
IBM plans to acquire from Systemcorp 
ALG Ltd., a privately held company 
based in Montreal, Canada. Pricing for 
that product was not announced. 

IBM also said it will continue to sup- 
port and enhance Rational Rose and 
Rational XDE, it current modeling 
offerings. I 
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< continued from page 8 

sion of z/OS is the first to require the company's new z/Architecture r 
which means that it's not backward-compatible with earlier main- 
frames. IBM says that z/OS 1.7, which will improve C/C++ 99 compli- 
ance, will be released September 2005 . . . RIQTek Manager 4.7U is 
the latest version of RIQTek Technology LLC's Web-based application 
_ I «|^- - lifecycle manager. This release offers a new 
l\IVc I2K trend chart in its project monitor page, as 
well as a tool for updating the budgets for 
project changes. The software also defines a new senior manager role 
. . . FileNet Corp. has said that its FileNet P8 3.0 content manage- 
ment system is compatible with Microsoft's Web Services Enhance- 
ments 2.0 security toolkit . . . Grand Central Networks Inc. has 
launched an early access program for the next version of its Business 
Network Services. The new features are an update to GC ProcessEx- 
press, a business process modeler for orchestrating business process- 
es, and new Web services APIs designed to simplify application devel- 
opment and integration . . . Imceda Inc. has updated its LiteSpeed 
database tuning and backup toolset for SQL Server. Version 3.2 works 
with the SQL Server 2005 beta, and now offers object-level backup 
and recovery . . . Amazon.com Inc. has updated its partner-facing Web 
services. E-Commerce Service 4.0 (formerly called Amazon Web Ser- 
vices), provides product information on all Amazon.com product cate- 
gories, access to product images and customer reviews, and new 
extended search capabilities . . . Microsoft Corp. has updated Virtual 
PC, a Windows and x86 virtual machine for Macintosh. Version 7 adds 
compatibility with the Power Mac G5, and according to Microsoft is 10 
percent to 30 percent faster than the previous version. Virtual PC 7 
with Windows XP Professional costs US$249 . . . iWay Software, a divi- 
sion of Information Builders Inc., is offer- 
ing a resource adapter compliant with 
Java Connector Architecture 1.5 for its 
Universal Adapter Framework . . . Version 1.2 of Visual Rules, a Java- 
based business rules Eclipse plug-in from Innovations Softwaretech- 
nolgie GmbH, offers database connectivity through JDBC . . . Serena 
Software Inc. has updated its TeamTrack process management sys- 
tem. Version 6.2 has stronger searching and reporting capabilities, 
enhanced relationship capabilities for processes, and tighter integra- 
tion with change management systems from Serena and other com- 
panies . . . DashO 3.1, the newest Java code obf uscation tool from Pre- 
Emptive Solutions Inc., lets users obfuscate on a set of jar files, and 
works with JDK 5.0 .. . 4D Inc. is offering new connectivity plug-ins 
for MySQL, PostgeSQL and ADO for its 4D 2004 relational database 
. . . Riverbank Computing Ltd. has updated PyOt, a set of Qt bindings 
for Python. Version 3.13 adds support for the QUuid, QMetaObject and 
QMetaProperty classes. 



4ts 



PEOPLE 



ZL 



David Mitchell has taken over as CEO of webMethods 
Inc., following Philip Merrick's sudden retirement for 
health reasons. Mitchell, who joined webMethods in 
1997, had been president since 2001. Bill Russell, an 
independent director, has succeeded Merrick as chair- 
MITCHELL man of the board. . . . Open Source Development Labs 
Inc., a vendor consortium promoting Linux, has hired Thomas Hanra- 
han as director of Linux engineering. Hanrahan had been IBM's senior 
program manager for software development and testing, at its Linux 
Technology Center. OSDL also named founding director Timothy 
Witham as CTO . . . Joe Lichtenberg is the new VP of marketing for 
Cape Clear Software Inc., which provides Web services management 
software. Lichtenberg had been VP of marketing for Bowstreet. He 
replaces Colin Newman, who left the company. 

, STANDARDS , 

The IETF has published its Internet draft specifications for XMPP, the 
Extensible Messaging and Presence Protocol, used for instant mes- 
saging and building presence-aware applications. I 



Black Duck Brings Lawyers 
In During App Development 



BY DAVID RUBINSTEIN 

Question: How many lawyers 
does it take to sign off on soft- 
ware licenses? Answer: Too few, 
if you find yourself defending 
intellectual property infringe- 
ment lawsuits. 

Black Duck Software Inc., 
which sells tools for managing 
intellectual property risks, is try- 
ing to change the solution to that 
riddle. Last month, the company 
introduced protexIP/license 
management, a service aimed at 
corporate attorneys charged with 
ensuring open-source software 
licenses and company policies 
are not violated during the appli- 
cation development process. 

Developers might be think- 
ing, "Great, another layer of 
bureaucracy to wade through 
before I can complete my pro- 



ject." But Keith Erskine, senior 
product manager at Black Duck, 
said the tool doesn't intrude on 
developers, but allows corporate 
counsel to see what issues are 
involved when open-source soft- 
ware is brought into a propri- 
etary application. 

The Black Duck knowledge 
base, hosted by Black Duck, is 
used to flag developers working 
in the protexIP/development 
Eclipse plug-in when they try to 
use code that is in violation of 
one of the stored licenses, or 
one of the company's policies 
regarding the use of certain 
software, Erskine explained. 
"Developers can go to attorneys 
and say, T want to use this com- 
ponent. Will there be a prob- 
lem if we use it and ship?' " 

The new Web-based license 




With protexIP/license management, attorneys can see if open-source soft- 
ware causes conflicts with company licenses. 



management piece holds more 
than 200 open-source software 
licenses and gives corporate 
attorneys a view into the project 
during development, and not at 
the end of the project, when 
pressures to get the software 
out the door could interfere 
with a thorough legal review. 
"Lawyers are often left scram- 
bling," he said. 

Giving lawyers a view into the 
work during development also 
helps them determine if changes 
in corporate policy or licensing 
agreements would impact a pro- 
ject in progress, Erskine added. 
Further, he said, it can be used 
to help ensure a company is in 
compliance with the growing 
number of governmental and 
industry regulations. Updates to 
the repository knowledge base 
are made as more licenses 
become known, Erskine noted. 

License management, which 
requires the company's protex- 
IP/development software to 
run, costs US$9,500 for a two- 
user subscription. The develop- 
ment tool costs an additional 
$12,500 for a five-user sub- 
scription. 

The company also announced 
it recently received $5 million in 
funding from General Catalyst 
and Flagship Ventures, accord- 
ing to CEO and founder Doug 
Levin. "We realize the problem 
[with IP violations] isn't continu- 
ing, it's getting worse," Levin 
said. "With the greater complex- 
ity of software, there is that 
much more risk." I 



OPEN BAR OPEN FOR DISCUSSION 



< continued from page 1 

before they give their opinion," 
said Jason Wacha, general 
counsel for Linux developer 
MontaVista Software Inc., and 
co-founder of Open Bar Inc., a 
non-profit organization that 
runs the site. "There aren't a lot 
of good places to go to learn 
what other lawyers are thinking 
about current legal open- 
source issues. So we decided 
to start a community where 
lawyers can find and bounce 
issues off each other." 

Wacha said that while the 
site was originally conceived as 



a stopping point for lawyers 
looking to share information, 
he believes that developers 
also may find it useful. "This 
will be a source for unbiased 
input on issues and legal advice 
by open-source experts. 
[Developers] will be able to 
find out what lawyers think 
about a given topic as opposed 
to other engineers." 

Unfortunately, the legal- 
advice links and discussion por- 
tions of the site remain unde- 
ployed. "We have not had the 
time and money to pay someone 
to enable that technology," 



Wacha acknowledged. 

Instead visitors to the site 
find prominent links to a 
US$50-per person seminar and 
to sponsored Web sites — law 
firms that happen to specialize 
in intellectual property litiga- 
tion — which Wacha admits 
could give the impression of a 
for-profit venture. "The sponsor 
links will be moved to a spon- 
sors page. But as this grows, we 
hope it becomes the go-to site 
for people who want to under- 
stand the legal perspective on 
current issues in open-source 
software licensing." I 
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Systinet Updates Web Services Plug-In 



BY JENNIFER DEJONG 

Systinet Corp. has updated its 
Web services enablement kit, 
readying the plug-in to support 
version 3.0 of the Eclipse open- 
source framework as well as the 
WS -Reliability specification. 

Systinet Developer 5.0 uses a 
wizard-based approach to help 
Java developers create, test, 

Sun Proposes 
Merging EJB, 
JDO Mapping 

< continued from page 1 

declared that it would abandon 
the JDO specification. 

"Back at JavaOne, they had a 
birds of a feather for the J2EE 
group to talk about the EJB 3.0 
specification. There were a ton 
of customers in that birds of a 
feather who were complaining 
that you have this great persis- 
tence standard JDO. Why are 
you getting rid of it? 

"In that technology meeting, 
it came to shouting," Green 
continued. "To say that people 
have been clamoring for this is 
an understatement." 

"Even to this day, the data 
persistence models in EJB and 
JDO differ significantly. This 
divergence has caused confusion 
and debates among Java devel- 
opers, and is not in the best 
interest of the Java community," 
said the letter, which was signed 
by DeMichiel and Craig Russell, 
specification lead for Java Data 
Objects (JDO) 2.0. 

Sun issued the proposal 
because it is specification lead 
for both EJB 3.0 and JDO 2.0, 
said Dennis MacNeil, product 
line manager for J2EE platform 
and community. 

Even though Sun was specifi- 
cation lead for EJB 3.0 and had 
been specification lead for JDO 
2.0, it sought the agreement 
from other EJB 3.0 expert group 
members before issuing the pro- 
posal, said Manish Chandra, vice 
president of worldwide market- 
ing at Versant. 

Developers will be able to 
use POJO persistence indepen- 
dently of EJB 3.0. 

The joint specification will 
be included with J2EE 5, and 
may cause the delivery of that 
enterprise Java version to slip 
from late 2005 to early 2006, 
MacNeil said. I 



debug, deploy and publish Web 
services within Eclipse 3.0, as 
well as earlier releases, said Dave 
Butler, vice president of market- 
ing for the Cambridge, Mass.- 
based company. Support for WS- 
Reliability 1.1, published by 



OASIS in September, ensures 
that a Web services message is 
delivered once and only once, 
said Systinet product manager 
Petr Dvorak. Also new to Devel- 
oper 5.0, is improved integration 
with Netegrity Inc. s SiteMinder, 



which was acquired last month 
by Computer Associates Interna- 
tional Inc. In the previous ver- 
sion 4.7, developers who wanted 
to link to the identity manage- 
ment offering had to hand-code 
the connection, said Dvorak. 



Developer 5.0 is available as 
a free download from www 
. systinet . com/products/download 
_center, as is Systinet s Web ser- 
vices runtime environment, 
Systinet Server for Java. But 
customers pay US$2,000 per 
server processor when they 
deploy into production Web 
services created in Developer. I 
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Wind River To Distribute Generic Linux 

Leapfrogs Red Hat RTOS effort with development kit based on 2.6 kernel 



BY EDWARD J. CORREIA 

Wind River Systems Inc. this 
week announced that it will dis- 
tribute Linux with the Platform 
for Network Equipment, Linux 
Edition, a set of tools for build- 
ing devices around a generic 
Linux 2.6 kernel. The company 
will offer the kit for public beta 
testing on Dec. 15; general 
availability is set for early 2005. 

"Networking equipment is 
the first major market to 
embrace Linux on a very broad 
basis," said John Bruggeman, 
Wind River's chief marketing 
officer, of the company's reasons 
for selecting this particular verti- 
cal market first. Wind River also 
has updated its VxWorks-based 
platform for the same vertical, 
along with those for targeting 
consumer and industrial devices. 

Bruggeman said the new 
Linux platform is not related 
to Wind River's previously 
announced plans to work with 
Red Hat Inc. to develop an 
RTOS based on that company's 
distribution. "We continue to 
work together feverishly" on a 
product that he said will first 
target server-blade appliances; 
release is set for the first half of 
next year. 



"This is not a Wind River dis- 
tribution," Bruggeman clarified. 
"This is a general open-source 
distribution based on a standard 
Linux 2.6 kernel distribution that 
we have tested and [verified] 
that it's of high enough quality 
for Wind River to support and 
package." The platform, which 
he said also conforms to the 
OSDL's Carrier Grade Linux 2 
specification, will be licensed 
under a GPL but will be sup- 
ported under current VxWorks 
contracts. "That enables the cus- 
tomer to pick the best platform 
the application based on busi- 
ness model and pricing." 

Bruggeman said that unlike 
other embedded Linux vendors 
such as MontaVista, Wind River 
will not include proprietary 
changes to the Linux kernel. 
"We've just added a middle- 
ware layer that sits on top. The 
general practice at MontaVista 
and most vendors is to break 
the seal of the Linux distribu- 
tion and create a new branch 
and multiple forks of the Linux 
kernel. Our approach is to stay 
mainstream and not to change 
the kernel until after a submit- 
ted patch is accepted by the 
community." 



"Customers are choosing 
Linux for open standards and 
interoperability," said Jacob 
Lehrbaum, MontaVista's prod- 
uct manager for mobile and 
wireless. "We draw the latest 
code from standard open- 
source repositories and modify 
as necessary to meet customer 
expectations only using technol- 
ogy developed in open-source." 



ECLIPSE UPDATES 

This week Wind River released 
an update to Workbench, its 
Eclipse-based development 
environment for targeting 
VxWorks, Linux and propri- 
etary operating systems that 
according to Bruggeman sup- 
plements Eclipse's C develop- 
ment tools (CDT) with tools 
more suitable for embedded 



development. 

Included is a C-language 
development tool plug-in that 
works alongside CDT. "Cus- 
tomers use CDT to do native 
[host-based] development, and 
then switch to Wind River's 
tools for development on the 
target," such as for kernel-level 
programming and debugging," 
he said. I 



Nokia Fixes Broken Delivery Model 



BY EDWARD J. CORREIA 

Addressing what it calls a frac- 
tured and dysfunctional appli- 
cation and content delivery 
mechanism for its platforms, 
Nokia Inc. in late October 
unveiled Preminet, an open 
delivery and billing solution 
that it claims will give carriers, 
and eventually enterprises, a 
unified method of displaying, 
deploying and billing for wire- 
less content. 

"Until now, the process of 
getting mobile Java and Sym- 
bian software from the creator 
to the end-user has been highly 
fragmented," admitted Lee 
Epting, vice president of 



Forum Nokia, which encom- 
passes the company's develop- 
ment programs. 

The solution comprises 
three main components, each 
of which Epting said can work 
independently: a catalog, for 
displaying and describing con- 
tent; middleware for handling 
authentication, file delivery and 
other session-related activities, 
and a device client for browsing 
catalogs and portals and for 
purchasing content. 

Epting said the model, which 
combines Nokia-hosted services 
with those managed by cus- 
tomers, is flexible. "Customers 
can take just the client and inte- 



grate that with their existing FTP 
back-end, they can take just the 
catalog and plug it into their 
existing catalog or FTP [back- 
end]. If they've got no ability to 
deliver content, we can bring in 
partners such as Sun and do that, 
or host components on behalf of 
the operator." 

Pricing for the service, 
which became available on Oct. 
25, includes a one-time setup 
fee of €20,000 to €100,000, 
depending on the back-end 
integration required, plus a rev- 
enue-sharing arrangement to 
be determined. There are no 
costs for client software or cata- 
log access. I 



TAKING ANOTHER CRACK AT REAL-TIME LINUX 
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ously A spinlock tells you that 
you can't use a part of the kernel 
because it's in an area that could 
cause data corruption if multiple 
applications accessed it simulta- 
neously." A disadvantage of this 
method, he said, is that the 
entire kernel is locked up by an 
application when it holds a spin- 
lock point, forcing other applica- 
tions to wait until the kernel 
reaches another spinlock point 
before it can be preempted. 

The mutex approach divides 
the kernel. "A mutex sets flags 
around critical regions within 
the kernel when an application 
requiring real-time responsive- 
ness is performing its work and 
others must wait," which 
Lehrbaum said brought about 
the need to implement priority 
inheritance. "So if a real-time 
application is waiting for one of 
those regions to become vacant, 
it can upgrade the priority of the 
application within the locked 



region so it can get its job done 
and get out quicker." 

Victor Yodaiken, CEO and 
co-founder of FSM Labs Inc., 
which develops and markets a 
real-time Linux using a dual- 
kernel approach, is skeptical 
of attempts to adapt Linux 
itself to hard real-time appli- 
cations. "There have been a lot 
of attempts at real-time [Lin- 
ux] and none have been very 
successful; everybody seems to 
be trying to reinvent the 
square wheel." 

HARDWARE GETS IN LINE 

Regardless of what software is 
doing, Linux by default gives 
hardware top priority, which 
Lehrbaum said can be a deal- 
breaker for many real-time sys- 
tems. "For instance, if a real- 
time task is running and 
somebody presses a key on the 
phone, maybe the phone ends 
up dropping its connection to 
the back-end network." 



HARDENING REAL-TIME LINUX 

• New Kernel Mutexes: Replaces 2.6 preemptable kernel; allows 
multiple tasks to execute simultaneously in separate kernel regions 
while protecting kernel resources; adds priority inheritance. 

• Thread-based Interrupt Management: Allows hardware to be 
prioritized relative to apps and other hardware; prevents non- 
critical hardware from preempting applications. 

• Improved Multitasking: Apps now only lock "critical regions" 
within kernel. If a real-time app needs access to a locked critical 
section, priority-inheriting mutex upgrades its priority. 



MontaVista's idea for solving 
this problem is to add thread- 
based interrupt management, 
empowering developers to 
make hardware wait like any 
other task. "We're enabling a 
fully prioritizable system, so 
you can prioritize hardware 
events relative to each other or 
to applications." 

The idea is not new. And 
while it might sound good in 
theory, Yodaiken warns of com- 
plications with hardware priori- 
tization. "The problem is main- 



tenance. Historically with [such 
systems] you've had to keep 
adjusting and reconfiguring to 
keep them exquisitely bal- 
anced. If you have Linux kernel 
internals balanced [for existing 
hardware] and you plug in a 
new video card or add memory, 
it may or may not meet with 
other priorities. Our [solution] 
is a lot less delicate." 

But Lehrbaum maintains 
that embedded system develop- 
ers require more control than is 
currently available with Linux. 



"When you're designing a real- 
time system you need to take 
into account the different prior- 
ities of the different things that 
are going on. Our real-time 
scheduler [offers] over 100 dif- 
ferent levels of priority." 

Lehrbaum also believes that 
the single-kernel approach is 
important for broad Linux adop- 
tion in low-cost consumer, indus- 
trial and networking devices. 
"Typical smart phones are built 
with two processors and two 
operating systems. In those envi- 
ronments the RTOS runs on 
[one processor] and a Linux 
application environment on 
another. But low-end devices 
can't afford two processors and 
two sets of memory. It's also 
expensive to maintain two oper- 
ating environments and develop- 
ment teams." 

MontaVista has developed a 
reference implementation and is 
inviting community participa- 
tion. Source code is available 
now at source.mvista.com; the 
company expects to begin mar- 
keting the new kernel exten- 
sions in early 2005. I 
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The Art Of 
Object-Relational Mapping 



BY GEORGE WALSH 



For those involved in the mainte- 
nance and programming of data- 
bases, the topic of object-relation- 
al (O/R) mapping often cannot be 
avoided. However, what it is, why 
it's important, and how the tools intend- 
ed to make it easier have evolved are 
key issues. 

The main reason that O/R mapping 
is important is that, while relational 
databases — which have been around 
since the 1960s — have remained pri- 
marily the same, the programming 
methods used by those who need to 
access those databases has changed dra- 
matically. Most programmers now write 
applications in object-oriented lan- 
guages such as C + + or Java, while the 
data stored in relational databases is in a 
"table." To bridge the gap and access 
the information in the database, IT pro- 
fessionals are basically left with two 
options: writing custom code that reach- 
es into the database to grab the infor- 
mation, or using a third-party product 
intended to help automate the process 
and make accessibility easier. 

Obviously, if you only talk to the 
vendors of O/R mapping tools, you'll be 
looking at the world through rose-col- 
ored glasses. "What's interesting about 
O/R mapping is that it's being per- 
ceived as either an enterprise require- 
ment or a specialized requirement by a 
lot of developers," said Greg Baker, 
director of marketing for Thought Inc., 
which sells the CocoBase mapping tool. 
"That belief comes into place for sever- 
al reasons. One is that you can write a 
JDBC program and 
embedded SQL as a 
fairly novice develop- 
er. You can't do trans- 
action coordination 
as a novice developer. 
There's a big differ- 
ence between being 
able to write a simple JDBC/SQL state- 
ment and actually building a persis- 
tence implementation that scales well, 
that performs well, and that manages 
complex graphs of information. All of 
those things are what enterprise O/R 
mapping delivers." 

Raul Davidovich, chief operating 
office at D MCI, a company that has col- 
laborated on the Jcorporate Expresso 





O/R mapping is perceived 
by developers as a 
specialized requirement 

-Greg Baker, director of marketing 
of Thought Inc. 



Framework, said the improvements in 
O/R tools are helping that market seg- 
ment to grow more rapidly. 

"We now have great O/R frame- 
works that add very little complexity 
and performance overhead to a sys- 
tem," he said. "Moreover, they simplify 
it, and correct use of them can even 
improve performance. There are new 
persistence technologies being intro- 
duced at the enterprise level, and het- 
erogeneous architectures are more and 
more common. This 
also means that we 
must shield our sys- 
tems from database 
evolution so we can 
focus in improving 
business logic, rather 
than keeping it up to 
date with backend changes." 

As programming in object-oriented 
languages has become hugely popular, 
companies have sought to attack the 
problem by creating object databases, 
or object caches that sit in front of rela- 
tional databases. Yet these have not 
caught on as quickly as might have been 
expected. 

Gus Bjorklund, vice president of tech- 



nology for Progress Software division 
ObjectStore, said object-oriented data- 
bases really haven't caught on because 
relational databases are ubiquitous. 
Object-oriented databases, he said, are 
"kind of a niche market that will never 
really replace relational databases for a 
variety of reasons. One is that relational is 
firmly entrenched. The other is that 
object-oriented databases have their uses, 
so there are people who use them either 
in conjunction with relational databases 
in some way or they have particular needs 
that are best met with an object-oriented 
database. There are lots of applications 
that aren't business-oriented where you 
don't care about relational data. For 
example, if you're doing call routing, you 
only care about the routing logic and the 
network configuration and not so much 
who's making the call." 

As far as O/R mapping goes, Bjork- 
lund believes that tools can save a lot of 
effort in many situations. "If your appli- 
cation is written in an object-oriented 
language and your data is in a relational 
database, some sort of O/R mapping is 
an absolute necessity. In an awful lot of 
applications, the mapping functionality 
isn't explicit. It's just part of the applica- 



tion that people write as a matter of 
course. As a result you get bits of it scat- 
tered throughout the application. Peo- 
ple frequently do this coding by hand 
because they don't realize there's any 
other way to do it. The amount of code 
you write for this purpose could be sub- 
stantial. I think the reason that people 
don't use these tools is primarily because 
they don't know they exist. Many people 
also say why should I pay for a tool 
when I can do it myself.' It's easy to see 
how to do it yourself, you just don't real- 
ize how much work you're putting your- 
self through. There's a lot of complexity 
that's not apparent when you're trying to 
solve these problems. For example, if 
you don't think about caching the data in 
your application, you could end up with 
performance issues when you scale it up 
from your development environment to 
actually running a deployed system." 

While trying to store object data in 
relational tables is one hurdle to over- 
come, another is the increasing use of 
XML, and the need for businesses to 
store unstructured data in their relation- 
al tables. 

Hit Software's Allora is a mapping 
► continued on page 26 
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engine and graphical interface to link 
XML schemas or DTDs with relational 
databases. "We were thinking in 2000 that 
this was a market that was going to 
explode in the dot-com years. Those com- 
panies really needed to move data from 
XML to relational databases," says Giaco- 
mo Lorenzin, president and CEO of Hit. 
"The dot-com market collapsed and many 
companies chose a much more conserva- 
tive approach and did O/R mapping in- 
house, either coding in Java or .NET The 
reality is that if you deal with one XML 
schema, one DTD, or a couple of them, 
its feasible to do the coding yourself. 
However, if the number of schemas starts 
to grow to hundreds or thousands, it 
becomes a really difficult task. Especially 
this year, we've seen big companies really 
start to look at third-party tools that can 
successfully deal with 
the mapping between 
XML and relational 
databases. Definitely 
more applications are 
Web-based, but I 
would say that XML is 
really becoming the 
format in which com- 
panies exchange data. We have a case 
where one of our customers is requiring 
that their vendors supply information in 
XML. When a big company says 'if you 
want to do business with me, you have to 
give data to me and accept it in this for- 
mat,' its vendors need to comply." 

DATABASE VENDOR SUPPORT 

While most O/R mapping tools are sold 
by third-party vendors, a few notable 
database vendors are getting into the act 
in one way or another as well. IBM and 
BEA have been working on a joint spec- 
ification called Service Data Objects 
(SDO) that is intended to allow applica- 
tion programmers to uniformly access 
and manipulate data from heterogeneous 
data sources, including relational data- 
bases, XML data sources, Web services, 
and enterprise information systems. 

Oracle has its own O/R mapping prod- 
uct called TopLink, a Java object-to-rela- 
tional persistence architecture, which 
provides a mechanism for storing Java 
objects and Enterprise Java Beans in rela- 
tional database tables. TopLink — as an 
independent company — was started 1994 
and was acquired from the defunct Web- 
Gain in June of 2002. "In the past, the 
biggest competitor for an O/R mapping 
system has been people doing the pro- 
gramming themselves," says Dennis 
Leung, vice president of development for 
Oracle TopLink. "I think what's happened 
over the past few years is that people are 
getting more educated as to the chal- 
lenges of the problem. Things that you'll 
see are that people who build mapping 
themselves can spend anywhere from 30 



Developers don't use 0/R 
tools because they don't 
know they exist 

-Gus Bjorklund, vice president of 

technology for Progress Software 

division ObjectStore. 



percent to 50 percent of a project's 
resources on it. It can sneak up on people. 
At the end of these projects, the project 
manager often wishes he or she would 
have bought something to address the 
task. On the surface, the problem is pret- 
ty basic to solve. You have your data struc- 
tures in relational and you want to map 
the objects, but very quickly you can run 
into some difficult challenges. You rarely 
see the skill set needed to solve those 
problems. Someone needs to be an expe- 
rienced object-oriented developer who 
has also has database skills. Even with the 
skills, mapping is time-consuming." 

Microsoft doesn't have its own O/R 
mapping tool, but does have opinions 
about them. "This is a 30-year-old indus- 
try problem where there is an impedance 
mismatch between programming lan- 
guages, the operations support of those 
programming lan- 
guages, and the tools 
support for those pro- 
gramming languages," 
said James Hamilton, 
a Microsoft SQL 
architect whose focus 
is on security. "The 
same problems, from 
data model through special services, exist 
on the database side. When you under- 
stand that it's an industry-wide problem 
that's been around for a long time, you 
can make a couple of observations. Yes, 
something is needed. Is mapping one of 
the things that's needed? Absolutely. 
However, it goes beyond that. We need 
to make data-intensive programs easier 



and less expensive to write. Mapping is a 
component of that solution, but to focus 
only on that is not thinking deeply 
enough. Every interesting program has 
a database component. There's always 
persistent storage included in any 
interesting application. The problem 
developers have is 



If you're doing simple 
database functions, 
you may not need a 
mapping tool. 



that what they've 
always wanted is to 
operate right on ob- 
jects. We saw object 
databases developed 
as an effort to solve 
that problem but 
there were difficul- 
ties with those efforts and they have 
failed. Most interesting programs have a 
server-side component and a client-side 
component. There's always software in 
the middle tier, the client tier, and in the 
database server itself. The biggest prob- 
lem that developers face is that pro- 
gramming languages used in the differ- 
ent tiers are also fundamentally 
different. They don't have a high-quality 
language in the database tier." 

Microsoft currently relies on third- 
party partners to supply products for OR 
mapping. "We don't have a product ship- 
ping right now, but we have had betas 
and we've released test copies of prod- 
ucts that show that the direction we're 
going is deep integration between the 
production environment and the rela- 
tional data storage world," Hamilton said. 

Sybase also realizes the disparity 
between object-oriented programming 
languages and relational databases, and 



-Randy Stafford, 
chief architect IQNavigator 



has its own design product called Pow- 
erDesigner. "Relational databases and 
object-oriented systems are very different 
paradigms," says David Dichmann, senior 
product manager of Sybase PowerDe- 
signer. "You can 'translate' between them, 
but at the end of the day, the database 
will rarely match the 
structure of the code. 
The mismatch happens 
in such a way that — to 
either the developer or 
the DBA— the links 
between the two worlds 
are not obvious. Due to 
the non-trivial, often 
quite complex, mappings needed to wire 
data to code properly, there is a signifi- 
cant time and cost associated with this 
effort. Tools like ours are available to 
minimize the cost and time of these 
efforts, and are often able to earn a 
return on the cost of the tools very 
quickly when measured against the more 
significant cost of engineering effort. 
However, there are two levels to consider 
when looking at tools to help manage this 
effort — development tools that make the 
coding of the linkages easier and faster, 
assuming you know what those linkages 
should be, and design tools that provide 
an impact on the effort by defining the 
linkages themselves, independent of 
implementation details. Design is even 
more important when OR mapping is in 
heterogeneous environments, like those 
found in service-oriented architectures or 
integrated systems, where multiple lan- 
guages and databases exist." I 



Developer Experiences Differ With O/R Tools 



BY GEORGE WALSH 

Because object-relational mapping is 
more art than science, different opinions 
do exist when discussing the topic. Den- 
nis Byrne, manager of integration ser- 
vices at Global Knowledge in Cary, N.C., 
said his company adopted the tools to 
shorten their development cycle with no 
additional resources or training. One of 
the problems and challenges solved by 
the tools was allowing the company to 
quickly adapt to various client data-inte- 
gration needs. The integration process, 
Byrne said, was extremely smooth, and 
the company thinks of different ways to 
use the product across their enterprise 
every day. "The most difficult problem to 
overcome is convincing upper manage- 
ment that a product that does not cost 
hundreds of thousands of dollars is truly 
an enterprise product," he added. 

Paul Novak, a developer with Resolu- 
tion Inc. of South Burlington, Vt, had a 
different opinion. "I actually inherited 
this task from someone who left the 
company," he said. "I believe the choice 
to use the tool was driven by his inexpe- 



rience with Java. The tool took a layer of 
complexity away from the project. It was 
purchased for use in a project initiated 
by one of our clients. In an effort to get 
a better handle on their business, and 
decouple themselves from their ven- 
dors, they planned to set up a standard 
set of file exchanges. They chose to use 
XML for the file formatting, so we were 
left with the task of parsing their files 
into our database tables, and creating 
XML files to send back to our client. We 
have expanded our use of the tool to sev- 
eral other clients for use in purchase 
orders and product setup." 

Integration, on the other hand, was 
another story. "The integration process 
was time-consuming and difficult. The 
XML documents we are processing can 
be quite complex, with many nested 
repeating sections," Novak said. "The 
tool we chose did not handle this well 
initially. Future versions did take this 
into account, but we lack the resources 
to remap and retest all of our existing 
maps, thus we have ended up running 
multiple versions of the toolset." The 



documentation was sparse in some 
areas, and he added, tended to use ter- 
minology that in his experience wasn't 
standard. 

Randy Stafford, chief architect at 
IQNavigator in Denver, Colo., sees the 
lack of adoption of O/R mapping tools 
partly due to users' ignorance of the 
benefits of domain-driven design. "The 
domain-driven design style of architec- 
ture is most applicable when you have a 
certain amount of complexity in your 
enterprise applications," he said. "If 
your application is just doing very simple 
'create, read, update, delete' functions 
between screen and database, then you 
may not need a database mapping tool. 
You may just be able to get away with 
straight JDBC access to database. If 
your application has complexity because 
of a large database schema, a large 
object model, or workflow characteris- 
tics where some of the objects have 
complex state models — or if your appli- 
cation has significant computational 
aspects — then it's beneficial to put those 
things in the domain model." I 
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EDITORIALS 

Licensing Matters 

Today, it sometimes seems that a software architect 
needs not one but two degrees: one in computer sci- 
ence, the other in intellectual property law That's particu- 
larly true of those who wish to participate in open-source 
projects, and who are planning to incorporate open-source 
code into their enterprise or commercial applications. 

In many ways, this is unfortunate. The "free-as-in- 
speech" concept behind open source was to enable the 
unfettered sharing of intellectual property, so as to elimi- 
nate the potential for restrictive software monopolies as 
well as to speed the pace of technological innovation. 
Many developers learn best by looking at other applica- 
tions; there's no better training ground than participating 
in open source, and by learning to integrate such projects 
into larger solutions. 

The open source world is under siege, however. The 
overt enemies of open source software include The SCO 
Group and Microsoft. SCO's the biggest problem, based 
on its lawsuits and FUD tactics against Linux that allege 
that IBM incorporated SCO's intellectual property into 
some code that's now part of the broader Linux ecosys- 
tem. Microsoft, by contrast, sees Linux and other open- 
source projects as competitors to its Windows and Office 
product lines, and simply wants them to go away. 

Beyond SCO and Microsoft, however, are more subtle 
challenges. The proliferation of licenses, for example, is 
one of them. Licenses are contracts, and a company that 
embeds open-source code into its software has made a 
tacit agreement with whoever has issued that open- 
source license. While the terms of that license may per- 
mit the use of the code in precisely the way a develop- 
ment manager intends, the unfortunate reality is that his 
or her legal department now needs to be involved in 
reviewing the terms. 

All of these legal issues increase a company's cost for 
using open-source software, a fact that companies like 
Microsoft are sure to exploit in making their business case 
for closed-source, proprietary code. 

The legal situation regarding open-source software 
should not dissuade its use. Open-source software 
remains a viable and cost-effective solution for many 
companies. But intelligent use of open source should 
include budgeting for the costs, and the annoyances, of 
bringing in the lawyers. 



Voting Matters 



Every four years, U.S. citizens have the opportunity to 
choose a new president. While the presidential race 
dominates the news and debate, this election is also for all 
members of the House of Representatives, one-third of 
U.S. senators, as well as many state and local officials. 

Certainly, American foreign policy will be strongly influ- 
enced by this year's presidential election; the war in Iraq, of 
course, is a top issue. But it's not the only one. Many eco- 
nomic and public-policy issues are also in play at the feder- 
al level and within states and cities. Your choice of local offi- 
cials, votes on bond issues, ballot initiatives, all affect 
personal lives, as well as professional careers. 

If you are eligible to vote in this year's elections, we 
urge you to study the issues, make your choices and cast 
your vote. It matters. I 



The Lessons of Software Monoculture 



Last summer, much was 
made of Slate author Paul 
Boutin's harangue in his June 
30, 2004 "Webhead" column. 
Boutin basically told his read- 
ers to drop Microsoft's Internet 
Explorer like a hot rock and 
move to Mozilla's Firefox, 
because of the increasingly 
nasty security holes turning up 
in IE. Problem is, Slate is 
owned by Microsoft. 

Ouch. 

It really has gotten that 
bad, and it's easy to be left 
with the impression that 
Microsoft creates lousy soft- 
ware, rotten with bugs that 
allow the black hats to break 
into our networks and bring 
the global Internet to its 
knees. The anti-Microsoft 
tomato tossers insist that if 
only Microsoft cleaned up its 
products, we'd be rid of the 
security holes and the black 
hats who thrive on them. 

It's not that simple. Microsoft 
has some of the best program- 
mers in the world working on its 



Jeff Duntemann 



products, and books like "Writ- 
ing Solid Code" from the Micro- 
soft developer culture are seen 
as classics that belong on every 
programmer's shelf. Nonethe- 
less, Microsoft software has 
bugs; all software has bugs, 
which is a crucial point that I'll 
return to later. 

What we have to 
understand is that 
our current prob- 
lems with Internet 
Explorer have less to 
do with bugs than 
with success. When 
a product has 90% of 
a huge worldwide 
market, there will be 
problems. It doesn't 
matter what the product is, 
and it matters only a little how 
good it is. What matters is that 
Internet Explorer is virtually 
the sole organism in an ecosys- 
tem that the world's technolo- 
gy industry depends on. When 
IE catches a cold, the net- 
worked world gets pneumonia. 

This metaphor from biology 




is called software monoculture. 
Ubiquitous high-bandwidth 
communication has turned the 
world of computing from 
countless independent islands 
into a single global ecosystem. 
The fewer distinct organisms at 
work within this ecosystem, the 
easier it is for a 
bug — any bug — to 
become a threat to 
the health of the 
whole. 

Worms and virus- 
es that depend on 
these bugs replicate 
and travel automati- 
cally, and unless 
they can assume that 
the next system is 
identical (bugs and all) to the 
one they're leaving, they can't 
propagate as quickly nor do as 
much damage. If only one in 20 
systems allowed such worms 
and viruses to take hold (rather 
than nine out of 10) it's doubtful 
that they could ever achieve any 
kind of critical mass, and would 
be exterminated before they 



Letters to the Editor 



CVS FUD 

I agree with Allen Holub's col- 
umn ("Subversion Control," 
Oct. 1, page 31, or on http: 
//www.s dtimes.com/cols 
/javawatch_lll.htm) that CVS 
has serious drawbacks and Sub- 
version is a serious improve- 
ment, but at least two state- 
ments in the column spread 
more FUD than they should. 

The first is that a one-file-at- 
a-time approach means that 
disaster can result when two 
people try to check in simulta- 
neously (one user's changes can 
be overwritten by another's). 
Mr. Holub suggests that some 
changes can be lost. This is not 
true. CVS will serialize commits 
on the directory level and it will 
never allow one user's changes 
to be committed if they had not 
been merged with other users' 
changes. 

Second, though CVS works 
across a network, it uses a pro- 
prietary protocol that requires a 
hole in your firewall... there 
have been CVS-related security 
breaches. 

Sure it is not as convenient 
as running Subversion over 
HTTP, but among less and 
more secure connection meth- 
ods that CVS offers there is one 



(":ext:") that boils down to the 
CVS client logging on to the 
server's host using ssh. This is as 
secure as sshd. 
Grzecjorz Jakacki 

POINTERS ON DB.* 

The article ("ITTIA Relights 
'db star' Database," Sept. 15, 
page 25, or on http://www 
.sdtimes.com/news/110/emb2 
.htm) is wrong, db.* is not an 
in-memory database. In the 
interest of not confusing the 
developer community, you 
might consider printing a cor- 
rection. 

Also, Sasan Montaseri's state- 
ment, "With a pointer, you 
access records directly, so there's 
no I/O involved," is false. The 
pointer equates to one logical 
disk I/O (the page may be in 
cache), which is better than the 
>3 to 5 disk I/O to traverse an 
index, but it's not zero. 

Steve Graves 

McObject LLC 

PRIDE IN ENGINEERING 

I think the story ('Borland is 
taking another shot at the 
enterprise with Themis," Sept. 
15, page 1, or on http://www 
.sdtimes.com/news/110/story4 
.htm) perpetuates a dangerous 



stereotype that's been building 
up more and more, since com- 
panies started buying into the 
notion of "outsourcing" as 
being the savior of the technol- 
ogy business. Mr Elloy's state- 
ment that the term software 
engineering "is a joke" is inde- 
fensible, and inflammatory, 
and I for one am surprised that 
Ms. Dejong did not take issue 
with it. 

If the media is there to dis- 
cover truth, expose and convey 
facts, then she should've 
pressed him on the specifics of 
Borland's software delivery 
strategy. In my opinion, he 
cooked up a scenario that fits a 
use case for the software he's 
trying to market. Where does 
he get his empirical data to 
back up his hypothesis? 

If a development organiza- 
tion isn't making a good ROI, it 
can be due to a myriad of 
things, not the least of which is 
the failure of management to 
judge an opportunity correctly, 
which will absolutely lead to 
misapplication of resources. 

I can only conclude that Mr. 
Elloy operates under the mis- 
conception that most seasoned 
software engineers are nothing 
more than "code monkeys," a 
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got too far. 

Software monoculture hap- 
pens for a lot of reasons, only a 
few of them due to Microsoft's 
sales and marketing practices. 
In the home market, nontech- 
nical people see safety in num- 
bers: They want to be part of a 
crowd so that when something 
goes wrong, help will be near- 
by, among family, friends, or a 
local user group. 

In corporate IT, monocul- 
ture happens because IT does- 
n't want to support diversity in a 
software ecosystem. Supporting 
multiple technologies costs way 
more than supporting only one, 
so IT prefers to pick a technol- 
ogy and force its use every- 
where. Both of these issues are 
the result of free choices made 
for valid reasons. Monoculture 
is the result of genuine needs. 
Technological diversity may be 
good, but it costs, in dollars and 
in effort. 

As if that weren't bad 
enough, there is another kind 
of software monoculture 
haunting us, far below the lev- 
el of individual products — 
down, in fact, at the level of 
the bugs themselves. 



If you give reports of 
recently discovered security 
holes in all major products (not 
merely Microsoft's) a very close 
read, you'll find a peculiar sim- 
ilarity in the bugs themselves. 
Most of them are "buffer over- 
flow exploits," and these are 
almost entirely due to the 
shortcomings of a single pro- 
gramming language: C/C + + . 
(C and C ++, are really the 
same language at the core, 
where these sorts of bugs hap- 
pen.) Virtually all software 
written in the United States is 
written in C/C + + . This 
includes both Windows and 
Linux, IE and Firefox. A recent 
exploit turned up in Firefox 
that was almost identical to one 
in IE. The standard C libraries 
have more market share than 
even Microsoft. 

This makes the obvious 
solution to software monocul- 
ture — switching to something 
other than Microsoft — prob- 
lematic. Individual consumers 
and individual corporate shops 
can switch to a minority prod- 
uct, like the Mac (for con- 
sumers) and open-source tools 
like Linux, Apache, Evolution, 



and Mozilla for the corporate 
enterprise. 

But then what happens if 
Mozilla or the Mac get too 
popular? They're all written in 
C, and they all have those 
same bugs. Once a product's 
market share creeps up toward 
50% or so, the effects of 
monoculture take hold again. 
You can run from IE, but if too 
many people run with you 
(and to the same destination) 
you won't be hiding for long. 

Putting today's security 
hole debacle in perspective 
requires this dual understand- 
ing of software monoculture. 
It's not just in the apps, but in 
our developer tools as well. 
Microsoft is almost incidental. 
It sounds hopeless, and if what 
we want to do is fix software 
monoculture itself, well, it is 
hopeless. Standards are good, 
and you'll pry C and C + + out 
of our programmers' cold, 
dead hands. 

No, the real lesson of soft- 
ware monoculture is that, like it 
or not, we're all in this together. 
It's not really about bugs, nor 
about Microsoft, nor about soft- 
ware at all. There has always 



been software monoculture 
(am I the only one here old 
enough to remember when 
OS/360 ruled the world? Or, 
hey, PC DOS?) but it took 
ubiquitous unmanaged high- 
bandwidth communication to 
turn an arcane sort of string 
buffer overflow into a global 
threat. Ducking the unavoid- 
able effects of software mono- 
culture really means going back 
to the drawing board and man- 
aging the communications that 
make one app's problem every- 
body's problem. Static packet 
filtering is clearly not enough. 
Even stateful packet inspection 
may not be enough. The real 
answer may not have been 
invented yet — but if we keep 
looking in the wrong places, or 
blaming the wrong people 
(Microsoft or anybody else) the 
black hats will keep on lighting 
fires, and the networked world 
will continue to burn. I 

Jeff Duntemann is a program- 
mer, technology editor and 
author, and was the founder of 
PC Techniques /Visual Devel- 
oper magazine, as well as of 
Coriolis Books. 



term I've heard bandied about. 
It's not bad enough that over 
400,000 IT jobs have been lost 
to outsourcing in the U.S. in 
2004 alone, without people who 
are supposedly associated with 
"industry leaders" making state- 
ments such as "the term is a 
joke" with regard to either the 
sort of work I perform or the 
ethic and integrity I bring to my 
job every single day. 

Software engineering as a 
field is relatively new. The fact is, 
the first programmers were not 
only engineers, but also mathe- 
maticians and physicists. 

The role of software engi- 
neers today is more than just 
typing in X lines of code to 
perform action Y. There are 
standard methodologies within 
each school of thought, such as 
Extreme Programming or 
Aspect-Oriented Program- 
ming, that one must follow. 
This is no different than the 
norms a civil engineer must 
follow when laying out a high- 
way, or a bridge. 

Obviously, either Mr. Elloy 
hasn't thought out his position 
thoroughly enough, or he is 
truly out of touch with what is 
involved in real software 
development. Either way, I am 
certainly glad to NOT be 
under his employ, and I can 
well see why Borland has gone 



through the set of travails it 
has endured. 

I wish them luck in righting 
their course, and maintaining a 
foothold in a couple of the 
markets they once dominated 
(C++ and Java products ). As a 
long-time customer of theirs, I 
wish them much success; how- 
ever, with the attitudes demon- 
strated by upper management 
like Mr. Elloy, I find it increas- 
ingly difficult to believe that's in 
the cards. 

Marcelo R. Lopez, Jr. 

Sr. Applications Engineer 

Voicerite, Inc. 

CORRECTION 

Richard Drolet is president of 
Capstone Technology Inc. His 
company was misidentified in 
the Oct. 1 special report. 

CLARIFICATION 

Stryon Inc. offers iHub, a run- 
time module that serves as a bi- 
directional bridge that allows 
Microsoft and Java application 
objects to interact as if they 
were on the same platform. An 
article in the Sept. 15 issue on 
Stryon's iNET code converter 
failed to include this product, 
which is also a part of the com- 
pany's .NET- to- Java interoper- 
ability suite. 

More letters, page 32 
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Perhaps developers would prefer the question to have been "Should 
there be a J Do Not Call' list for developers?" Fully three-quarters of the 
467 respondents in Evans Data Corp.'s Developer Marketinq Patterns, 
2004, indicated that phone calls from sales reps was their least pre- 
ferred form of marketinq contact. 

E-mail from vendors, thouqh trailinq telemarketinq by a country 
mile, was still disfavored by more than one in 10, which the study con- 
cludes is indicative of a feelinq of ill-will amonq developers that unso- 
licited e-mail is disturbinq reqardless of the source. 

Forms of marketinq that developers found least obnoxious are 
tradeshow presentations and maqazine ads, and relatively few objected 
to readinq announcements found on Usenet-style discussion qroup sites, 
and receivinq direct printed mail and unsolicited evaluation software. 
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The Protection Racket Shakedown 



Patents are a weapon. A patent s value 
is proportional to the patent holder s 
willingness to go to court. Many busi- 
nesses (IBM is notable) use patents as 
an offensive weapon. They attack the 
competition for infringement in order to 
drive the other company into bankrupt- 
cy. Looked at this way, the validity of the 
patent is not much of an issue. The U.S. 
Patent Office, which seems particularly 
incompetent when it comes to weeding 
out bad patent applications, doesn't help 
the situation. 

Unfortunately, determining validity is 
surprisingly difficult. You defend your- 
self from a patent-based attack by prov- 
ing "prior art." You have to show that 
someone other than the patent holder 
had the idea first. 

In pursuit of getting some work as an 
expert witness, I was chatting recently 
with an attorney at Fenwick and West, 
one of the Bay Area's larger high-tech 
legal firms. She was working on a case 
where IBM was suing a smaller company 
for infringement. IBM was claiming that 
they had a patent on the notion of check- 
ing referential integrity in a database by 
examining the references one at a time. 

Of course, every programmer that you 
talk to thinks that it's nonsensical to patent 
such a basic concept, one that's been 



around since the dark ages. The attorney, 
however, was having a hard time actually 
documenting this fact. She needed to 
locate someone who had used or pub- 
lished the idea before the patent was actu- 
ally filed, and could document its use. 
Finding such a person was not easy. 

(As an aside, one way to prove prior art 
short of actually applying for a 
patent yourself is to keep a 
written engineering notebook 
with bound, numbered pages. 
Date and sign each page and 
give the notebook (or certified 
copies of it) to a neutral third 
party for safe keeping. You 
should do the same thing with 
snapshots of your source code. 
Another way to establish prior 
art is to publish your ideas and 
keep copies of the publication.) 

This very publication made a contro- 
versial choice earlier this year, and put 
one company that embraces patent-based 
attack strategies, The SCO Group Inc., in 
the "SD Times 100" list as a top influ- 
encer," (www.sdtimes.com/news/102/ 
speciall.htm), citing that its legal assaults 
on IBM and Linux users dominated tech- 
nology headlines and inspired fervent 
debate, fear, uncertainty and doubt. 

For those of you who have been living 




in a cave, SCO's business strategy is to 
compensate for a notable lack of intellec- 
tual capital by suing other companies on 
"intellectual property" grounds. They 
buy up companies in order to acquire 
their patent portfolios, then sue the 
deepest pockets that they can find for 
allegedly stealing their intellectual prop- 
erty. The attacked companies 
settle out of court because it's 
I cheaper to just pay off SCO. 
This is a classic protection 
racket: SCO extorts money 
from innocent companies, 
who pay up in order to avoid 
long-term pain. 

The SD Times award was 
Ttf'jji n °t an endorsement of SCO's 
I7t tactics; it made no judgment 
/aJJJmJ about whether the influence 
was good or bad. No one can deny that 
SCO has been influential, however, and 
we're now seeing SCO's strategy being 
adopted by other companies. 

In particular, Kodak, who's manage- 
ment seems to have missed the digital- 
photography revolution, is now trying to 
fund its move into the digital world by 
extorting money from other companies. 
Kodak sued Sun (and won) for violation 
of patents that Kodak acquired from the 
now-defunct Wang computers. The 



validity of the patents is dubious, but 
Sun has nonetheless paid Kodak $92 
million in protection money to get 
Kodak off its back. 

Kodak's claim that these particular 
patents are valid is really nonsensical, 
but is hard to disprove. If you don't 
believe me, the patents in question are 
5,226,161, 5,421,012, and 5,206,951. To 
read them, do a patent-number search 
at http://patft.uspto.gov/netahtml/srch- 
num.htm. In essence, Kodak is claiming 
a patent on the notion of a server pro- 
gram delegating some of its work to a 
helper program (such as a database). 
Bear in mind that Kodak won the case. A 
non-technical court agreed with them. 

On the positive side, SCO posted a 
net loss of $7.4 million for last quarter, 
compared with a profit of $3.1 million a 
year ago. In other words, SCO's strategy 
doesn't seem to make for long-term suc- 
cess. Let's hope that companies like 
Kodak will either learn from this failure 
and compete by developing better prod- 
ucts rather than by extorting money 
from intellectually superior competitors. 
If not, let's hope that the SCOs and 
Kodaks of the world simply go out of 
business. It's hard to imagine that you 
can achieve long-term success simply by 
preying on your betters. I 

Allen Holub is an architect, consultant 
and instructor in C/C++, Java and OO 
Design. Reach him at www.holuh.com. 
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Letters to the Editor 



ENDERLE NOT IMPARTIAL 

In your story ["The Pride of the (Open 
Source) Community," Oct. 15, page 1, 
or at www.sdtimes.com/news/112/story3 
.htm], you cite Rob Enderle as "princi- 
pal analyst at high-tech consultancy 
Enderle Group." That is an incomplete 
and possibly misleading attribution for 
Mr. Enderle. 

The Enderle Group does paid pro- 
motion for clients without identifying 
them as a conventional PR firm does. 
From the Enderle Group Web site, as 
quoted on http://enderle.iwethey.org/: 
Rob Enderle, the founder, has been the 
most highly quoted analyst since 1995 as 
ranked by firms like the Kensington 
Group and Sage Circle. In addition he 
has been in the top ten of most influen- 
tial analysts as ranked by Technology 
Marketing since the beginning of that 
ranking and was ranked number one in 
2001 in influence (#2 in 2002). This 
gives the Enderle Group a unique mar- 
keting and influence expertise not 
shared by any other firm; one focused on 
how to do the most with the limited 
marketing budgets available today. 

When using Mr. Enderle as a 
source, please mention relevant clients, 
as other publications do. For example, 
eWeek included the following notice in 



an opinion piece Mr. Enderle wrote for 
them: Editor's note: Microsoft Corp. is 
a client of the Enderle Group, the con- 
sulting firm headed by Rob Enderle. 
And internetnews.com also cited rele- 
vant clients: Rob Enderle, a market 
consultant and founder of the Enderle 
Group, also supports the burned out 
feelings about SCO in the enterprise. 
His clients include both SCO and 
Microsoft, both companies with a vest- 
ed interest in slowing the growth of 
Linux adoption. 

Don Marti 

zgp.org 

Some comments attributed to Rob 
Enderle, and some comments on those 
comments: 

"Yes you can get access to source and 
see how it works, but so can everybody 
else and that gives you less ability to pro- 
tect your intellectual property." 

That is 100% wrong. Free Software 
relies on copyright for its operation in 
exactly the same way proprietary soft- 
ware does. The only potential IP loss is 
"trade secret" and in these days of high- 
ly competent disassemblers and "crack- 
ing tools," withholding your source 
gives you little if any protection there 
anyway. You'd actually be better off 



with a copyright and "read only" source 
license because then you can sue a 
competitor who grabs and modifies a 
copy of your source, where if they dis- 
assemble it the resulting code is much 
more difficult to get a court-useful 
match on. 

"If you tried to go after a software 
vendor who made a mistake and did 
you damage, that vendor could argue in 
their defense that you too got to see all 
the code, and that you're partially 
responsible." 

100% wrong. Opening the code 
gives you the benefit of the doubt, 
which is an advantage in court. The 
onus is on the one with closed code to 
make their point. 

"Typically, the burden is on the 
[recipient] to prove you gave your [intel- 
lectual property] to him. With the GPL, 
the burden of proof is on the developer 
to show software was given away without 
permission." 

100% wrong. If your source is closed, 
the thief-recipient can (and often does) 
claim ignorance. "How can we avoid 
what we cannot see?" Again, the advan- 
tage lies in opening the code. 

"It's like client/server in the early 
1980s, where people said it was good for 
everything. We now know it's only good 
for some things." 

100% wrong. We know now that it's 
not good for everything. In particular, it's 



not good for the people who most often 
rent Enderle 's opinion (Microsoft and 
The SCO Group come to mind, hardly 
people reknowned for their balanced 
views). Even Richard Stallman, father of 
the GPL, has cited cases where a non- 
GPL license is a better fit. 

Rob Enderle is consistently wrong, 
and is only in the market for the money, 
and to do this he raises controversy by 
making inflammatory and misleading 
statements. He is not honest, he is not 
open, and his opinion is not useful. I'd 
appreciate your media group never 
using his opinion again. 

Leon Brooks 

Editors note: The Enderle Group has 
a consulting relationship with Microsoft; 
it also has contracts with HP, IBM, Intel 
and several other companies engaged in 
open-source development. 

WHAT DO YOU THINK? 

SD Times welcomes feedback. Letters 
should include the writer's name, com- 
pany affiliation and contact informa- 
tion. Letters become the property of 
BZ Media and may be edited for space 
and style. 

Send your thoughts to feedback® 
bzmedia.com, or fax to +1-631-421- 
4045. Please mark all correspondence 
as Letters to the Editor. 
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I Speaker: Theresa Lanowitz 
■j JJ Research Director, Gartner Inc. 

Theresa Lanowitz joined Gartner in 
1 . July 1999 where she is a member of 
W the Research and Advisory Services 
I ^fc^_^H organization specializing in soft- 
ware quality assurance and mobile application 
development. Prior to joining Gartner Group, 
Ms. Lanowitz held the position of marketing 
strategist for Sun Microsystems Inc.'s Jini pro- 
ject. She also headed the marketing department 
of the Internet products division at Borland 
International where she was responsible for the 
introduction of the JBuilder Java IDE and 
Borland C++. 
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Moderator: David Rubinstein 
Editor, SD Times 



David Rubinstein brings more 
than 25 years of newspaper 
experience to his role as 
editor of SD Times. He has 
covered a wide range of software develop- 
ment issues, including change and config- 
uration management and software testing, 
in his five years at the helm, and writes 
a regular column that examines the devel- 
opment industry as a whole. 
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A Study Doesn't Make It So 



Anew study supports my belief that 
.NET is more productive than 
J2EE. Nevertheless, I don't think you 
should make business decisions based 
on the study. 

The Middleware Company's "Com- 
paring Microsoft .NET and IBM Web- 
sphere/J2EE" is probably the best- 
designed study of programming platforms 
that I've seen, and the conclusions line up 
with my opinions on the relative strengths 
and weaknesses of .NET and J2EE. Nev- 
ertheless, I think that developer-team and 
individual programmer productivity is so 
variable, and long-term success is so 
dependent on iterating existing code, that 
it's unwise to base one's decisions on any 
study that pits small teams of experts 
implementing a never-before-seen speci- 
fication from scratch. 

I admit the seeming absurdity of say- 
ing "don't make a decision based on a 
study that claims X; instead make a deci- 
sion based on the say-so of a columnist 
who claims X." The world would be a 
much simpler place if decisions about 
software development could be made on 
the basis of objective data. 

Unfortunately, our industry is at a 
stage where the intellectually honest 
thing is to choose your development 
platform on the basis of anecdotal evi- 
dence and "gut feelings." 



We know that breaking up software 
into modules (whether object-oriented or 
not) helps, we know that short iterations 
reduce risk, we know that programmers in 
smaller teams are relatively more produc- 
tive than those in larger teams, and we 
know that rapidly delivering high-quality 
software is still a hard task that virtually no 
organizations have mastered. 
We really do know that there is 
no silver bullet, if for no other 
reason than the criteria by 
which software is judged will 
forever grow more demanding. 

Another thing we know is 
that the majority of software 
cost comes after the initial 
writing. Most programming is 
re-programming. This is the 
biggest flaw in The Middle- 
ware Company's approach: Like the all- 
too-common emphasis on the installation 
process in software reviews, the TMC 
study emphasizes the experience of the 
very first days of a project. Predicting 
enterprise productivity by looking at 
expert teams' initial days with a non- 
ambiguous spec is like predicting a 
NASCAR season based on the first 
driver to take a qualifying lap. 

Having said that, the two teams in 
the TMC study give every indication of 
having approached the task as if it 
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were a long-duration project, and there 
don't appear to be any egregious short- 
cuts on either team's part. 

Yes, the study, which you can down- 
load from www.middlewareresearch.com, 
was sponsored by Microsoft, and some 
will take that as evidence enough of bad 
faith. Predictably, a common claim is that 
"If only they'd used Brand X 
instead of WebSphere for the 
test, things would have been 
different," and others have 
said that the problems 
described betray a lack of 
P WebSphere experience, 

although the J2EE team relied 
^m\ on "two independent, Web- 

Sphere-certified consultants 
having a total of 7 years experi- 
ence on the WebSphere plat- 
WebSphere is neither my favorite 
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nor least favorite J2EE implementation, 
but it's certainly not a straw man chosen 
because it's easy to knock down. 

Both teams had various false starts 
and needed to backtrack, and it's certain- 
ly true that different programmers would 
have found different things challenging. 
This is in the very nature of program- 
ming, again especially in those early days, 
when a system is not yet dominated by its 
history of special cases, double-reverse- 
contradictory requirements, and quirky 



implementations made by That Guy Who 
Seemed Like A Good Programmer For 
The First Two Weeks. 

The .NET team took less time to 
accomplish essentially every program- 
ming task, but not by margins that should 
sway a team into abandoning J2EE. How- 
ever, there was a dramatic disparity in 
configuration and tuning, scheduled for 
20 person-days of effort, and accom- 
plished in 16 by the .NET team and 
requiring 76 days from the WebSphere 
team in their initial effort using Rational 
Rapid Developer. Despite my caution 
about making conclusions based on this 
study, I have to say that this is a difference 
between .NET and J2EE that has gone 
largely unremarked and which resonates 
strongly with me as a consultant who 
works in the field with both platforms. 

Despite my belief that .NET is more 
productive than J2EE, that C# is superior 
to Java, and that a multilanguage platform 
has more potential, I have recently taken 
on a Java-using client and disengaged 
from a .NET-using client. The Java-using 
team has a complete unit-testing suite, 
sharp-as-tacks programmers, and an 
understanding and engaged executive 
team. The .NET team... less so. I don't 
need a study to know which one has a pro- 
ductivity advantage and which one will be 
a more rewarding engagement. I 

Larry O'Brien is a technology consultant 
and analyst, and the founding editor of 
Software Development Magazine. 
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In my last column, I discussed my plans 
to use Java for future development 
projects because of the announced 
changes to Windows APIs. Since those 
changes will be the third round of API 
changes Microsoft has announced in five 
years, I chose Java over .NET purely 
because I don't want to keep rewriting 
the same software. 

The cost of constantly evolving APIs 
is rarely discussed in the tug-of-war 
between Java and .NET, but I believe it 
will become compelling as IT depart- 
ments and ISVs face rewriting existing 
software anew. My choice of Java APIs 
says a lot about how much progress Java 
has made during the last few years — 
many of the defects from which the plat- 
form suffered have now been cleaned up 
sufficiently that they no longer pose 
obstacles to adoption. Principal among 
these, of course, was performance. This 
issue has now receded due to much 
faster machines, better JVMs, JITs that 
emit better-optimized code, and reliance 
on native methods whenever perfor- 
mance is critical. 

The second important obstacle Java 
surmounted was the lack of good devel- 
opment tools. This need has been met 
with Eclipse (although JBuilder and 
IntelliJ were important predecessors). Ant 



(and soon perhaps, Maven, a build tool 
from the Apache Software Foundation) 
resolves the tedium of build-cycle man- 
agement. And JUnit, of course, has 
enabled the use of test-driven develop- 
ment on Java. Add to these, the testing, 
debugging, and performance-measure- 
ment tools from vendors such as Quest 
(formerly Sitraka) and Com- 
puware, and it's clear that Java's 
toolchain is comprehensive, 
buffed, and ready to go. 

The final obstacle to Java 
adoption had been the user- 
interface layer. No need to 
repeat the painful transition 
from AWT to Swing, and the 
subsequent realization that 
even Swing just couldn't do the 
job properly. 

The Eclipse community's develop- 
ment of the Standard Widget Toolkit 
and JFace saved the day by giving client- 
facing Java applications a proper GUI. 
They did away with the "metal" widget 
style and Java's emulation of Motif and 
Windows widgets; and replaced them 
with native widgets that are snappy and 
responsive for the most part. 

The cost is that applications are no 
longer pure Java in the doctrinal sense of 
100% Java and, as a result, portability of 
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SWT is not quite as extensive as Java 
itself. However, most important plat- 
forms now run SWT; if they don't sup- 
port the full toolkit, it is generally 
because accessibility features are miss- 
ing. Eventually, the full feature set will 
be in place everywhere. SWT and JFace 
conclusively solve the problem of the 
Java GUI. 

It might appear that in 
the transition from AWT to 
Swing to SWT/JFace, Java is 
imposing the same kind of 
API transitioning that led me 
to move away from Windows 
and .NET However, this is 
not really the case. Should I 
want to, I can continue to use 
AWT for my widgets. If I 
added Swing widgets to the 
app, I can still use them today, as if 
SWT never existed. No one is forcing 
me to rewrite my code and the old API 
sets are still fully supported. I don't 
have to change a thing. This is not true 
with Microsoft's APIs. I must change 
my code for it to work on future releas- 
es of Windows. 

In addition, it's important to note that 
SWT is not sponsored by Sun. In fact, it 
was developed in response to Sun, and 
Sun doesn't like it. In other words, the 



tools I need are provided in APIs devel- 
oped by a third-party vendor. To this day, 
such a broadly accepted third-party 
extension is not possible in .NET Micro- 
soft defines all the APIs to the operating 
system and there is no community devel- 
oping widely accepted APIs or GUI 
toolkits for Windows. 

I hasten to add that Java's APIs are no 
thing of beauty. Many experts are vocal 
on this point. And certainly the numer- 
ous layers of APIs and their almost infi- 
nite functionality suggest that learning 
the full extent of Java is a nearly endless 
(and probably pointless) undertaking. 
Personally, I think this is mute testimony 
to how much Java can do. (Consider, if 
you will, the vast range of functionality 
provided in even the minimal imple- 
mentations of J2EE.) However, the 
defining attraction of these interfaces is 
that code written for them does not 
need to be rewritten. In fact, even writ- 
ing code for 64-bit Java does not impose 
rewriting previous code. Old code just 
runs and early APIs are still supported. 

When IT sites consider enterprise 
applications, they must examine the 
longevity of their investment in code. 
When managers choose platforms on this 
basis, I believe they will find Microsoft 
and .NET do not provide the needed 
commitment to code stability. I 

Andrew Binstock is the principal analyst 
at Pacific Data Works LLC. 
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Technology's Impact on Ratings 
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Cooperate on standards, compete on 
implementation. It's a mantra we've 
heard time and again in the software 
development industry. But does adop- 
tion of and adherence to standards 
make a broad statement about a ven- 
dor's overall health? ACORD, a stan- 
dards organization for the 
industry, thinks so. 

ACORD approached bond 
rating firms Fitch Inc. about 
examining the technological 
capabilities of insurance com- 
panies in deciding how to 
rate the company's financial 
health. 

While bond-rating compa- 
nies do consider the use of 
technology as a part of their 
analyses, that's not been as 
direct a component of the 
process as, say, revenues or profitability 
projections. The standardization of data 
definitions and formats for transactions 
in the insurance industry has allowed 
Fitch to compare as apples to apples the 
strategies for utilizing these standards, 
and ranking companies accordingly. 

The ratings plan was the brainchild of 
Denise Garth, a vice president at 
ACORD, who wanted to educate the 
ratings companies as to what the stan- 
dards are and how they apply to strategy 
and the potential financial success of a 
company. "Companies are asked ques- 
tions about their technology by ratings 
companies," she said. "Now the ques- 
tions will be more precise." 

The new questions address a compa- 
ny's IT philosophy and operating princi- 
ple; familiarity with XML standards, 
industry data and best practices; and 
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deciding which systems to keep in place 
after a merger. 

"This begins to focus people in," 
Garth said. "Business drives the technol- 
ogy but they can't be separate. There has 
to be business/IT alignment and part- 
nership." 

This, of course, is another mantra we 
hear a lot: IT must serve the needs of 
the business, not exist for its 
own sake. The explosive 
growth of the business pro- 
cess management market, 
and the creation of tools that 
let business analysts get more 
involved in the development 
process, shows that business 
seems intent upon taking 
back control of their own IT 
departments. 

How insurance businesses 
use IT to impact their bottom line is 
something Garth said should be consid- 
ered by ratings companies. ACORD, she 
said, has set data standards for life insur- 
ance, annuity, medical health and prop- 
erty and casualty. "We've defined what's 
a premium, and have built standards to 
support process flow," she explained. 
"We agree on what the data means. So 
how do we use that to build out these 
process flows? When the transaction is 
defined, it's the business rules that are 
the differentiator." 

Using standards also helps companies 
cut costs, as XML has allowed companies 
to reduce the number of interfaces they 
employ for data exchange "from 600 or 
700 down to 100," Garth said, because of 
the reusability factor. The annual costs of 
maintaining that system are reduced, 
there are savings in not having to build 



new interfaces each time, and the compa- 
ny's time to market is faster, she said. 
These are things that impact a company's 
financial viability, and should be consid- 
ered when they are being rated. 

In a statement announcing the work 
with ACORD, Fitch senior director 
John Bareiss said the effort provides his 
company with "an understanding of a 
company's general approach toward 
technology, how well it uses technology 
to enhance its competitive position, and 
an understanding of whether costs are 
managed effectively." 

The way companies look at these 
issues strategically is a huge differentia- 
tor that should be reflected in how they 
are rated. "Technology has gone through 
so many cycles," Garth said. "There was 
a competitive thing in the '80s, then a 
cost thing due to bad decisions in the 
90s, when we had the whole V thing. 
Now it's how can we be strategic." 

What makes Fitch able to rate com- 
panies on all this is the standards. 
Insurance is one vertical industry in 
which all the major players have come 
to agreement on definitions and data 
standards. As other verticals also move 
in this direction — financial and health 
care are two in which standards are in 
place and work on others is progress- 
ing — the other leading corporate rat- 
ings companies, such as Dun & Brad- 
street and Standard & Poor's, should 
start to place more weight on technolo- 
gy in their assessments. 

That would be a sure sign that the 
days of technology driving business — 
often down dark, lonely roads — are 
behind us, and that the business people 
responsible for making decisions that 
impact a company's bottom line are 
buckled into the driver's seat. I 

David Rubinstein is editor of SD Times. 






Sun Microsystems Inc. will pay US$92 million to Eastman Kodak Co. to settle a 
patent-infringement lawsuit over Sun's Java programming language. A jury had 
found that Java infringed upon patents held by Kodak, and the settlement came as 
the jury was to decide damages. As part of the agreement, Sun will get licenses to 
the Kodak patents. Kodak had been seeking $1.06 billion . . . Looking to bolster its 
standing in the security software solutions market, Computer Associates Interna- 
tional Inc. last month agreed to acquire identity and access management (IAM) 
provider Netegrity Inc. for about US$340 million, after Netegrity's cash and stock 
are subtracted from the purchase price of $430 million. The deal is expected to 
close by the end of the year. "By adding the best Web security product on the mar- 
ket to its portfolio, CA significantly strengthens its leading position in identity and 
access management," said CA's CEO Kenneth Cron. CA plans to integrate the 
Netegrity assets into its eTrust IAM suite. Netegrity's products include Web-based 
application access management tool SiteMinder; TransactionMinder, for Web ser- 
vices access and security; IdentityMinder Web Edition, a role-based user adminis- 
tration for Web-based apps; and IdentityMinder eProvision, for creating, changing or 
ending identity-based access to enterprise systems and resources . . . Testing and 
development tool provider Compuware Corp. will acquire the technology assets of 
DevStream Corp., which has developed a J2EE performance analysis tool. Terms of 
the deal were not disclosed. Compuware plans to integrate the tool into its Com- 
puware Vantage application service management solution . . . Watchfire Inc., 
which recently purchased application security testing vendor Sanctum, has agreed 
to license its technology to rival SPI Dynamics Inc. . . . XML Global Technologies 



has completed a merger with business intelligence software vendor Xformity Inc. 
and has changed its name to Xformity Technologies Inc. XML Global had sold most 
of its assets to Xenos Group last November and had been looking for an acquisition 
partner . . . Vancouver-based business performance management software vendor 
Antarctica Systems Inc. has closed a CAN$4.2 million round of funding. The mon- 
ey will be used to further develop and market Visual Net, the company's flagship 
product that helps in the analysis of business issues regarding software performance 
. . . NetManage Inc., which sells mainframe access software, has agreed to acquire 
Librados Inc., which sells enterprise application adapters. Terms were not disclosed. 
NetManage will add the Librados adapter library to its host services platform. 

EARNINGS: Sun Microsystems Inc. reported revenue of US$2.63 billion for 
the first quarter of its 2005 fiscal year, which ended Sept. 26. Revenue increased 
3.6 percent from the $2.54 billion it reported for the same quarter in 2004. How- 
ever, the company posted a net loss for the quarter of $174 million, or 5 cents per 
share. This compares to a loss of $286, or 9 cents per share, from the same quar- 
ter a year earlier. The loss includes an $82 million charge for settling litigation and 
a charge of $108 million for workforce and real estate restructuring . . . Apple 
Computer Inc. announced fourth-quarter 2004 revenue of US$2.35 billion, an in- 
crease of 37 percent from the year-ago quarter. Apple showed a net profit of $106 
million, or 26 cents per share, compared to a profit of $44 million, or 12 cents per 
share, a year earlier. Apple shipped 836,000 Macintosh units and 2,016,000 iPods 
during the quarter. I 
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Supercomputing 2004 Nov. 6-12 
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Dec. 7-9 
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Macworld Expo 
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Web Services Feb. 1-2 
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